carlspring / carlspring/vertx-codeql-queries

Implement a CodeQL query that checks for invocations of Vertx.vertx()

Open
#14 0 comments 0 reactions 1 assignee Claimed by @carlspring View on GitHub
Dominant language
Java
Stars
0
Forks
1
PR merge metrics
No merged PRs in 30d

Description

# Task Description

We need to implement a CodeQL query that checks for invocations of `Vertx.vertx()`.

# Open Questions

# Notes

# Task List

The following tasks will need to be carried out:
* [x] Implement a query.
* [ ] Create a query help file.
* [x] Test the fix.
* [x] Implement a test case.
* [x] Add Java class(es) that contains the vulnerability.
* [x] Add Java class(es) that do not contain the vulnerability.
* [x] Set up a `.qlref` file.
* [x] Set up an `.expected` file and make sure the results only contain findings in the vulnerable class(es).
* [x] Set up an `options` file.
* [x] Set up a `pom.xml` file.

# Useful Commands

# Incurred Costs

# Task Relationships

This task:
* Is a sub-task of:
* Depends on:
* Is a follow-up of:
* Relates to:

# Resources

# Useful Links

# Points of Contact

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.