Java CodeQL hangs for hazelcast repository
Abierto
acknowledged
Java
question
- Lenguaje dominante
- CodeQL
- Estrellas
- 10.1k
- Forks
- 2.1k
- Merge medio
- 2 d 15 h
- PR fusionados (30 d)
- 141
Descripción
**Description of the issue**
Checking [hazelcast/hazelcast ](https://github.com/hazelcast/hazelcast) with the default CodeQL Java query set is not able to finish. We have to exclude some queries as they hang. Then the GH workflow hits the 360min timeout.
The current [excludes](https://github.com/hazelcast/hazelcast/blob/master/.github/codeql/java-custom-queries.qls):
```
- exclude:
id:
- java/tainted-numeric-cast
- java/polynomial-redos
- java/path-injection
- java/ssrf
- java/zipslip
```
In the last few days, the CodeQL action started to hang on the `ZipSlip`. A new exclude was therefore added in hazelcast/hazelcast#22443.
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.