Java CodeQL hangs for hazelcast repository
Open
acknowledged
Java
question
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
**Description of the issue**
Checking [hazelcast/hazelcast ](https://github.com/hazelcast/hazelcast) with the default CodeQL Java query set is not able to finish. We have to exclude some queries as they hang. Then the GH workflow hits the 360min timeout.
The current [excludes](https://github.com/hazelcast/hazelcast/blob/master/.github/codeql/java-custom-queries.qls):
```
- exclude:
id:
- java/tainted-numeric-cast
- java/polynomial-redos
- java/path-injection
- java/ssrf
- java/zipslip
```
In the last few days, the CodeQL action started to hang on the `ZipSlip`. A new exclude was therefore added in hazelcast/hazelcast#22443.
Contributor guide
Assessment
This issue has not been assessed yet.