Securing CodeQL queries using Semgrep
semgrep.dev
Securing CodeQL queries using Semgrep
1–3 of 3 posts
Re: Securing CodeQL queries using Semgrep
#2Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition.
Edit: missed what day it is
Re: Securing CodeQL queries using Semgrep
#3Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition. Edit: missed what day it is
I mean, it's arguably a security concern if you're not catching the mistakes you intended to catch.