codeql icon indicating copy to clipboard operation
codeql copied to clipboard

Does codeql support checking the contents of configuration files in yaml format?

Open Exloit opened this issue 1 year ago • 1 comments
trafficstars

Hello, I have some golang applications that use yaml format files as configuration files, but R&D often writes some accounts and passwords in the configuration files. How can I use codeql to automatically detect whether the contents of these files contain sensitive files?

  1. When the "codeql database create --language=go" command cannot retrieve the yml file
  2. I created 2 databases by "codeql database create --language=go,yaml ...", but how do I write queries for the yaml database?

Are there some open source queries that can be referenced?

Exloit avatar Jun 14 '24 04:06 Exloit