Java CodeQL hangs for hazelcast repository
未關閉
acknowledged
Java
question
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
**Description of the issue**
Checking [hazelcast/hazelcast ](https://github.com/hazelcast/hazelcast) with the default CodeQL Java query set is not able to finish. We have to exclude some queries as they hang. Then the GH workflow hits the 360min timeout.
The current [excludes](https://github.com/hazelcast/hazelcast/blob/master/.github/codeql/java-custom-queries.qls):
```
- exclude:
id:
- java/tainted-numeric-cast
- java/polynomial-redos
- java/path-injection
- java/ssrf
- java/zipslip
```
In the last few days, the CodeQL action started to hang on the `ZipSlip`. A new exclude was therefore added in hazelcast/hazelcast#22443.
貢獻指南
評估
這個 Issue 還沒有評估資料。