github / github/codeql

Why is it that when CodeQL generates a database, some source code is not analyzed?

Open
#13,710 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

When I add the CodeQL-generated source code analysis database (referred to as "jeecgdb source archive") to the workspace in VS Code for viewing, I notice that some source code files are missing in the generated database structure. What could be the reason for this situation?

The missing file is:/Users/fqy/Desktop/CodeAudit/JAVA/jeecg-boot-3.5.0/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/api/controller/SystemApiController.java,In the generated database file, none of the files under the "api" directory have been included.

Contributor guide

Open the contributing guide

Research direction

Start by examining the CodeQL-generated database in the VS Code workspace and compare its structure with the Java project path ending in jeecg-system-biz/src/main/java/org/jeecg/modules/api/controller/SystemApiController.java. Check why files under the api directory are absent; done means identifying and documenting the cause of the incomplete database.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.