codeql
codeql copied to clipboard
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Fixes false positives cause by buildless extraction. Commit-by-commit review recommended. Removes 1008 false positives in the `asterisk/asterisk` projects as observed on codeql-qa. ### Pull Request checklist #### All query authors...
### Pull Request checklist #### All query authors - [ ] A change note is added if necessary. See [the documentation](https://github.com/github/codeql/blob/main/docs/change-notes.md) in this repository. - [ ] All new queries...
This is feature-complete now, I think. I don't think it needs a change note as models-as-data isn't a feature that we've publicly announced yet.
NB. This requires adding a hook to shared dataflow; this will need adding (as an empty stub) to other languages.
This pull request implements classes modelling formatting templates, especially the use of variables inside such templates, which were causing false positives for the unused variables query.
We recently updated our iOS project to build with Xcode 16, swift 5 mode (`SWIFT_VERSION = 5`). However our Azure CodeQL pipeline started to fail on database creation with `Library...