[Question] is Cross repo taint analysis in java possible ?
Open
question
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
Hello, we perform codeql java analysis on some repos, and in case the referenced package is from another repo we lose information,
I was wondering if it's possible to perform cross repo analysis, and how would that look like ? I wonder if a db build of multiple repos is possible and is that the best solution ?
Contributor guide
Assessment
This issue has not been assessed yet.