Skip to content

Unified: Basic data flow and clear-text logging query - #22560

Merged
asgerf merged 30 commits into
github:mainfrom
asgerf:unified/dataflow2
Sep 15, 2026
Merged

asgerf merged 30 commits into
github:mainfrom
asgerf:unified/dataflow2

unified: Update expected output

343459c
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL completed Sep 15, 2026 in 6s

6 configurations not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 6 configurations present on refs/heads/main were not found:

Actions workflow (codeql-analysis.yml)

  • ❓  .github/workflows/codeql-analysis.yml:CodeQL-Build/language:actions
  • ❓  .github/workflows/codeql-analysis.yml:CodeQL-Build/language:csharp

Actions workflow (cpp-swift-analysis.yml)

  • ❓  .github/workflows/cpp-swift-analysis.yml:CodeQL-Build

Actions workflow (csv-coverage-metrics.yml)

  • ❓  .github/workflows/csv-coverage-metrics.yml:publish-csharp
  • ❓  .github/workflows/csv-coverage-metrics.yml:publish-java

Actions workflow (rust-analysis.yml)

  • ❓  .github/workflows/rust-analysis.yml:analyze/language:rust

New alerts in code changed by this pull request

  • 2 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 16 in unified/ql/lib/codeql/unified/internal/dev/debugDataFlowGraph.ql

See this annotation in the file changed.

Code scanning / CodeQL

Using 'toString' in query logic Warning

Query logic depends on implementation of 'toString'.

Check warning on line 52 in unified/ql/src/queries/security/CWE-312/CleartextLogging.ql

See this annotation in the file changed.

Code scanning / CodeQL

Alert message style violation Warning

Alert message should end with a full stop.