How to use CodeQL to scan the sink of code（only sink）
未关闭
question
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
I want to know how to use CodeQL to scan the sink in the code and output it as a sarif file.
贡献指南
调研方向
The issue names CodeQL sink scanning and SARIF output but provides no file, test, or entry point. First determine whether the requested workflow is supported and locate the relevant existing CodeQL guidance; done means documenting a reproducible procedure for scanning only sinks and producing SARIF output.
由索引模型根据 Issue 内容生成。
评估
- 领域
- documentation, security
- Issue 类型
- 文档
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100