[Question] is Cross repo taint analysis in java possible ?
Offen
question
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
Hello, we perform codeql java analysis on some repos, and in case the referenced package is from another repo we lose information,
I was wondering if it's possible to perform cross repo analysis, and how would that look like ? I wonder if a db build of multiple repos is possible and is that the best solution ?
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.