-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathtest.yaml
More file actions
66 lines (61 loc) · 2.24 KB
/
Copy pathtest.yaml
File metadata and controls
66 lines (61 loc) · 2.24 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# Copyright 2026 Qingwei Li
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
logRoot: logs
repoRoot: repos # repoRoot stores all repositories
dbRoot: codeql-db # dbRoot stores all databases created by codeql indexed by repository name
# clone
repositories:
- dir: test/
repos:
# - aliasFieldAcc
# - assignToInterface
# - convInterface
# - CWE-369
# - CWE-400
# - CWE-525
# - CWE-807
- escape
- false-sharing
# - intraResourceLeak
# - memacc
# - memStatSliceExprSetNil
# - pkgcall
# - pkgtest
# - sliceExprNotSetNil
# build
language: go # language to analyze
buildTimeout: 3600 # timeout for building repository
buildGrps:
- buildRepos: # "*" means all repositories. "-" means repositories defined in the "repositories" section. You can also specify fullname of repositories to force re-build. Note that repositories with same fullname in different source will be re-built also.
- "-"
extgenScript: goescape
# query
queryconfig:
resultRoot: codeqlResult # resultRoot only for -collect csv. Bqrs/csv per db: <dbPath>/results/lslightly/qlstat/<queryPathNoExt>.<fmt>
parallelCore: 20 # parallel cores to run query
queryGrps:
- queryDBs: # "*" means all repositories. "-" means repositories defined in the "repositories" section. Otherwise, use fullnames. Note that repositories with same fullname in different source will be queried.
- "-"
queries: # queries
- convInterface/assign.ql
- convInterface/call.ql
externals: []
- queryDBs:
- false-sharing
queries:
- escape_ext/moved_to_heap_var_test.ql
- escape_ext/inlined_var_test.ql
- escape_ext/heapvar_should_move.ql
externals:
- movedToHeap