[Question] is Cross repo taint analysis in java possible ?
Abierto
question
- Lenguaje dominante
- CodeQL
- Estrellas
- 10.1k
- Forks
- 2.1k
- Merge medio
- 2 d 15 h
- PR fusionados (30 d)
- 141
Descripción
Hello, we perform codeql java analysis on some repos, and in case the referenced package is from another repo we lose information,
I was wondering if it's possible to perform cross repo analysis, and how would that look like ? I wonder if a db build of multiple repos is possible and is that the best solution ?
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.