Sudden Appearance of a codeql alert

[Subharanjan2055]

Hi ,

I've been using codeql in my github repository for the past two years to review code. There is a file that has existed in the repository for the same duration without ever triggering a codeql alert. However, yesterday i suddenly received an alert for that file.

What could have caused this new alert to appear despite no recent changes to that file or its dependencies?

Thanks, Subh

[redsun82]

👋 @Subharanjan2055 thanks for reaching out.

We constantly develop (and hopefully improve!) the queries behind our alerts, and by default CodeQL analysis will use the latest released CodeQL bundle. New bundle releases might mean changes in what data gets extracted from code and what we mark with alerts. Without having more information, I would say this is the most probable cause of a new alert popping up. If you do believe this alert is a false positive, you can let us know via a github/codeql issue 🙌