github / github/codeql

CodeQL maps CWE-730, which MITRE prohibits from being used for mapping

Aperta
#22,318 2 commenti 0 reazioni 0 assegnatari Vedi su GitHub
question
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

CodeQL maps weakness CWE-730 on Code Scanning alerts. According to [MITRE](https://cwe.mitre.org/data/definitions/730.html), CWE-730 is a Category and it is marked PROHIBITED (this CWE ID must not be used to map to real-world vulnerabilities).

Also note that this CWE is not listed in [CodeQL's CWE coverage](https://codeql.github.com/codeql-query-help/full-cwe/) page in the docs.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Start by comparing the CodeQL alert mapping for CWE-730 with MITRE's definition and prohibition notice. Then inspect the CodeQL CWE coverage documentation to determine how the mapping is represented. Done means prohibited CWE-730 is no longer mapped to alerts and the documented coverage is consistent.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Ambito
documentation, security
Tipo di issue
Bug
Difficoltà
3/5
Tempo stimato
1-2 giorni
Stato di attività
Tranquilla
Chiarezza
Abbastanza chiara
Idoneità per principianti
55/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.