[Question] is Cross repo taint analysis in java possible ?
未關閉
question
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
Hello, we perform codeql java analysis on some repos, and in case the referenced package is from another repo we lose information,
I was wondering if it's possible to perform cross repo analysis, and how would that look like ? I wonder if a db build of multiple repos is possible and is that the best solution ?
貢獻指南
評估
這個 Issue 還沒有評估資料。