dotnet / dotnet/source-indexer

[Compliance] CodeQL alerts due to missing justifications

Open
#191 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
55
Forks
46
Avg merge
23h 42m
Merged PRs (30d)
15

Description

We're seeing three CodeQL policy violations for these lines:

https://github.com/dotnet/source-indexer/blob/50c6287555684443dcac0a28af064a2e91bb1c94/src/SourceBrowser/src/HtmlGenerator/Utilities/Paths.cs#L273

https://github.com/dotnet/source-indexer/blob/50c6287555684443dcac0a28af064a2e91bb1c94/src/SourceBrowser/src/HtmlGenerator/Utilities/Paths.cs#L283

https://github.com/dotnet/source-indexer/blob/50c6287555684443dcac0a28af064a2e91bb1c94/src/SourceBrowser/src/SourceIndexServer/Controllers/SymbolsController.cs#L121

The justification string is insufficient to meet policy requirements. The suppression string must at minimum contain:

- Why it's not possible to use a different algorithm; _and_
- One of:
- Why we don't think a collision is likely to occur; _or_
- Why the consequences of a collision are uninteresting.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.