`js/weak-cryptographic-algorithm`/`BrokenCryptoAlgorithm` got 25-30x slower
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
**Description of the issue**
Similar to
- https://github.com/github/codeql/issues/18584
this rule appears to run 20-30x slower on the same exact repo with the same hardware
```
[106/106 eval 30m34s] Evaluation done; writing results to codeql/javascript-queries/Security/CWE-327/BrokenCryptoAlgorithm.bqrs.
```
unsure root cause is the same as the other issue, but disabling rule rule like
```yaml
query-filters:
- exclude:
id: js/weak-cryptographic-algorithm
```
is a workaround
贡献指南
调研方向
Start by comparing this report with github/codeql#18584, then inspect the js/weak-cryptographic-algorithm rule and the BrokenCryptoAlgorithm.bqrs evaluation named in the report. Reproduce the timing on the same repository and hardware if available. Done means identifying and addressing the cause of the 20–30x slowdown while preserving the rule’s results; the query-filters exclusion is only a workaround.
由索引模型根据 Issue 内容生成。
评估
- 领域
- performance, security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 活跃
- 描述清晰度
- 基本清楚
- 新手友好度
- 45/100