mirror of
https://github.com/github/codeql.git
synced 2026-02-12 13:11:20 +01:00
118abd40c9
In the future, this tag should signal to the action that the queries should be excluded from incremental scans because they are too slow and/or produce too many results. The three queries tagged here rely on global data-flow analysis to find all XSS sinks. All other metric and diagnostic queries are fast enough for incrementality.
17 lines
492 B
Plaintext
17 lines
492 B
Plaintext
/**
|
|
* @name Supported sinks in external libraries
|
|
* @description A list of 3rd party APIs detected as sinks. Excludes test and generated code.
|
|
* @kind metric
|
|
* @tags summary telemetry exclude-from-incremental
|
|
* @id java/telemetry/supported-external-api-sinks
|
|
*/
|
|
|
|
import java
|
|
import ExternalApi
|
|
|
|
private predicate relevant(ExternalApi api) { api.isSink() }
|
|
|
|
from string apiName, int usages
|
|
where Results<relevant/1>::restrict(apiName, usages)
|
|
select apiName, usages order by usages desc
|