fix: update CodeQL queries to include security-experimental suite for enhanced analysis
This commit is contained in:
@@ -28,11 +28,12 @@ codeql database create codeql-db-go \
|
||||
--overwrite
|
||||
|
||||
echo ""
|
||||
echo "📊 Analyzing with security-and-quality suite..."
|
||||
echo "📊 Analyzing with security-and-quality + security-experimental suites..."
|
||||
ANALYZE_LOG=$(mktemp)
|
||||
# Analyze with CI-aligned suite
|
||||
# Analyze with CI-aligned suites (mirrors codeql.yml queries: security-and-quality,security-experimental)
|
||||
codeql database analyze codeql-db-go \
|
||||
codeql/go-queries:codeql-suites/go-security-and-quality.qls \
|
||||
codeql/go-queries:codeql-suites/go-security-experimental.qls \
|
||||
--format=sarif-latest \
|
||||
--output=codeql-results-go.sarif \
|
||||
--sarif-add-baseline-file-info \
|
||||
|
||||
@@ -26,10 +26,11 @@ codeql database create codeql-db-js \
|
||||
--overwrite
|
||||
|
||||
echo ""
|
||||
echo "📊 Analyzing with security-and-quality suite..."
|
||||
# Analyze with CI-aligned suite
|
||||
echo "📊 Analyzing with security-and-quality + security-experimental suites..."
|
||||
# Analyze with CI-aligned suites (mirrors codeql.yml queries: security-and-quality,security-experimental)
|
||||
codeql database analyze codeql-db-js \
|
||||
codeql/javascript-queries:codeql-suites/javascript-security-and-quality.qls \
|
||||
codeql/javascript-queries:codeql-suites/javascript-security-experimental.qls \
|
||||
--format=sarif-latest \
|
||||
--output=codeql-results-js.sarif \
|
||||
--sarif-add-baseline-file-info \
|
||||
|
||||
Reference in New Issue
Block a user