How change SensitiveDataHeuristics.qll to find my own secrets?
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
**I want to change locally CleartextLoggingQuery.qll to find my own secrets**
I am new in CodeQL and I want to change locally **CleartextLoggingQuery.qll** to find my own secrets that could be logging. I noticed that this query links to [SensitiveDataHeuristics.qll ](https://github.com/github/codeql/blob/main/python/ql/lib/semmle/python/security/internal/SensitiveDataHeuristics.qll). I use codeql-bundle.
Tell me, please, what options do I have to edit queries? In this case, if I'm right, do I need to edit SensitiveDataHeuristics.ql and somehow rebuild the rule? Or should I use codeql-cli and somehow create my own query packages?
Help solve the problem, please.
Thanks
Contributor guide
Research direction
Start by reading CleartextLoggingQuery.qll and the linked SensitiveDataHeuristics.qll, then review the customization and packaging options available through codeql-bundle and codeql-cli. The work is complete when the supported local-query workflow and rebuild or package steps are documented clearly enough to run a customized secret-detection query.
Written by the indexing model from the issue text.
Assessment
- Domain
- security, tooling
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100