codeql
codeql copied to clipboard
Does codeql support checking the contents of configuration files in yaml format?
trafficstars
Hello, I have some golang applications that use yaml format files as configuration files, but R&D often writes some accounts and passwords in the configuration files. How can I use codeql to automatically detect whether the contents of these files contain sensitive files?
- When the "codeql database create --language=go" command cannot retrieve the yml file
- I created 2 databases by "codeql database create --language=go,yaml ...", but how do I write queries for the yaml database?
Are there some open source queries that can be referenced?