github / github/codeql

gradle: False positives from generated code from the version catalog feature

Abierto
#14,530 3 comentarios 0 reacciones 0 asignados Ver en GitHub
false-positive
Lenguaje dominante
CodeQL
Estrellas
10.1k
Forks
2.1k
Merge medio
2 d 15 h
PR fusionados (30 d)
141

Descripción

Using the version catalog feature of gradle () with the default `libs.versions.toml` file produces false positives such as:

> `.gradle/8.4/dependencies-accessors/1989acdfa2790571c9dc5975340ca543de5bf0a0/sources/org/gradle/accessors/dm/LibrariesForLibsInPluginsBlock.java:609`
> This method overrides `ProviderConvertible.asProvider;` it is advisable to add an Override annotation.

This is generated code and should not produce a warning (even if it's just at the *note* level)

Example source:
Corresponding alerts:

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.