Java CodeQL hangs for hazelcast repository
- Langage dominant
- CodeQL
- Étoiles
- 10.1k
- Forks
- 2.1k
- Merge moyen
- 2 j 15 h
- PR mergées (30 j)
- 141
Description
**Description of the issue**
Checking [hazelcast/hazelcast ](https://github.com/hazelcast/hazelcast) with the default CodeQL Java query set is not able to finish. We have to exclude some queries as they hang. Then the GH workflow hits the 360min timeout.
The current [excludes](https://github.com/hazelcast/hazelcast/blob/master/.github/codeql/java-custom-queries.qls):
```
- exclude:
id:
- java/tainted-numeric-cast
- java/polynomial-redos
- java/path-injection
- java/ssrf
- java/zipslip
```
In the last few days, the CodeQL action started to hang on the `ZipSlip`. A new exclude was therefore added in hazelcast/hazelcast#22443.
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.