github / github/codeql

How change SensitiveDataHeuristics.qll to find my own secrets?

Open
#14,356 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**I want to change locally CleartextLoggingQuery.qll to find my own secrets**
I am new in CodeQL and I want to change locally **CleartextLoggingQuery.qll** to find my own secrets that could be logging. I noticed that this query links to [SensitiveDataHeuristics.qll ](https://github.com/github/codeql/blob/main/python/ql/lib/semmle/python/security/internal/SensitiveDataHeuristics.qll). I use codeql-bundle.
Tell me, please, what options do I have to edit queries? In this case, if I'm right, do I need to edit SensitiveDataHeuristics.ql and somehow rebuild the rule? Or should I use codeql-cli and somehow create my own query packages?
Help solve the problem, please.
Thanks

Contributor guide

Open the contributing guide

Research direction

Start by reading CleartextLoggingQuery.qll and the linked SensitiveDataHeuristics.qll, then review the customization and packaging options available through codeql-bundle and codeql-cli. The work is complete when the supported local-query workflow and rebuild or package steps are documented clearly enough to run a customized secret-detection query.

Written by the indexing model from the issue text.

Assessment

Domain
security, tooling
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.