Securing CodeQL queries using Semgrep

11 points by brandonspark 2 years ago | 2 comments

ajbt200128 2 years ago |

Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition.

Edit: missed what day it is

werrett 2 years ago | |

I mean, it's arguably a security concern if you're not catching the mistakes you intended to catch.

ajbt200128 2 years ago |

Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition.

Edit: missed what day it is

werrett 2 years ago | |

I mean, it's arguably a security concern if you're not catching the mistakes you intended to catch.