diff options
| author | Michael Kubacki <michael.kubacki@microsoft.com> | 2022-11-08 10:19:17 -0500 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2022-11-09 14:53:10 +0000 |
| commit | b0fd3097193d9c6825979e57e78e6278163bfd8e (patch) | |
| tree | 18d3c7728ecd3850478b17e67e4f7f48e2b23b25 /.github | |
| parent | 179efe5d69214ba95cdcb9dcbc5845a9f0114146 (diff) | |
| download | edk2-b0fd3097193d9c6825979e57e78e6278163bfd8e.tar.gz | |
edk2.qls: Allow error severity results and add new queries
The query cpp/conditionallyuninitializedvariable was initially
enabled with the CodeQL code because work was in progress on those
changes. The results were filtered out so CodeQL passed so we could
verify the CodeQL workflow without impacting CI results.
This change allows error severity messages and substitutes that query
with two queries that do not return failures. This allows these
queries to find future problems and prepares the CodeQL workflow to
catch future failures as queries are enabled.
Cc: Sean Brogan <sean.brogan@microsoft.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
Reviewed-by: Sean Brogan <sean.brogan@microsoft.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
Diffstat (limited to '.github')
| -rw-r--r-- | .github/codeql/codeql-config.yml | 1 | ||||
| -rw-r--r-- | .github/codeql/edk2.qls | 4 |
2 files changed, 3 insertions, 2 deletions
diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml index 3e27c2fb0d..a51db141eb 100644 --- a/.github/codeql/codeql-config.yml +++ b/.github/codeql/codeql-config.yml @@ -25,6 +25,5 @@ queries: query-filters:
- exclude:
problem.severity:
- - error
- warning
- recommendation
diff --git a/.github/codeql/edk2.qls b/.github/codeql/edk2.qls index 0efc7dca52..ef9aae790f 100644 --- a/.github/codeql/edk2.qls +++ b/.github/codeql/edk2.qls @@ -9,4 +9,6 @@ # Enable individual queries below.
- include:
- id: cpp/conditionallyuninitializedvariable
+ id: cpp/infinite-loop-with-unsatisfiable-exit-condition
+- include:
+ id: cpp/overflow-buffer
|