github / github/codeql

How change SensitiveDataHeuristics.qll to find my own secrets?

Open
#14,356 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**I want to change locally CleartextLoggingQuery.qll to find my own secrets**
I am new in CodeQL and I want to change locally **CleartextLoggingQuery.qll** to find my own secrets that could be logging. I noticed that this query links to [SensitiveDataHeuristics.qll ](https://github.com/github/codeql/blob/main/python/ql/lib/semmle/python/security/internal/SensitiveDataHeuristics.qll). I use codeql-bundle.
Tell me, please, what options do I have to edit queries? In this case, if I'm right, do I need to edit SensitiveDataHeuristics.ql and somehow rebuild the rule? Or should I use codeql-cli and somehow create my own query packages?
Help solve the problem, please.
Thanks

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.