BenchmarkJava/scripts/runCodeQLFull.sh at master · mortendaehli/BenchmarkJava · GitHub

executable file

12 lines (9 loc) · 1.02 KB

# The full list of java CodeQL query sets is:

# tested: java-code-scanning.qls - Standard Code Scanning queries for Java - This does NOT include Weak Random rule.

# tested: java-security-extended.qls - Adds a bunch of rules to previous ruleset.

# tested: java-security-and-quality.qls - Adds a bunch of other rules, but scores identical to security-extended ruleset.

# tested: java-lgtm.qls - Standard LGTM queries for Java - scores the same as standard java-code-scanning.qls

# tested: java-lgtm-full.qls - Standard LGTM queries for Java, including ones not displayed by default. Scores the same as security-extended ruleset.

# This script assumes CodeQL has been installed and the owasp-benchmark database has already been initialized per the instructions in runCodeQL.sh

benchmark_version=$(scripts/getBenchmarkVersion.sh)

../../tools/codeql-home/codeql/codeql database analyze owasp-benchmark java-security-and-quality.qls --format=sarifv2.1.0 --output=results/Benchmark_$benchmark_version-codeql_java-security-and-quality.sarif

BenchmarkJava/scripts/runCodeQLFull.sh at master · mortendaehli/BenchmarkJava · GitHub

Expand file tree

Breadcrumbs

runCodeQLFull.sh

Latest commit

History

Breadcrumbs

runCodeQLFull.sh

File metadata and controls