mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

The CodeQL analysis is broken due to the large content of the SARIF file (#10606)

Browse Source 
The issue was originally caused by high number of flows paths per alert
generated by the LDAP federation module. That was identified taking the
SARIF file generated and running:

```
jq '.runs[0].results | map({query_id: .rule.id, numPaths: .codeFlows |
length})' java.sarif

```

Together we reduced the number of flows paths, adding optimizations to
skip some paths and avoid false alerts.

Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>

Closes #10203

Co-authored-by: Joshua Mulliken <joshua@mulliken.net>
This commit is contained in:
Bruno Oliveira da Silva
2022-03-11 09:55:17 -03:00
committed by GitHub
parent 30d2dcb7b3
commit f06ba05405
4 changed files with 107 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.github/scripts/codeql/codeql-install.sh vendored Executable file
View File

@@ -0,0 +1,6 @@
#!/bin/sh
LATEST_RELEASE_URL=$(curl -s https://api.github.com/repos/github/codeql-cli-binaries/releases/latest | grep browser_download_url | cut -d '"' -f 4 | grep -i linux)
wget -q --show-progress "$LATEST_RELEASE_URL"
unzip codeql-linux64.zip