github / github/codeql

Java CodeQL hangs for hazelcast repository

Open
#10,765 1 comment 0 reactions 0 assignees View on GitHub
acknowledged Java question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**Description of the issue**

Checking [hazelcast/hazelcast ](https://github.com/hazelcast/hazelcast) with the default CodeQL Java query set is not able to finish. We have to exclude some queries as they hang. Then the GH workflow hits the 360min timeout.
The current [excludes](https://github.com/hazelcast/hazelcast/blob/master/.github/codeql/java-custom-queries.qls):

```
- exclude:
id:
- java/tainted-numeric-cast
- java/polynomial-redos
- java/path-injection
- java/ssrf
- java/zipslip
```

In the last few days, the CodeQL action started to hang on the `ZipSlip`. A new exclude was therefore added in hazelcast/hazelcast#22443.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.