Add test for Gorm

Author: smowton

ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/go.mod

@@ -0,0 +1,7 @@
+module gormtest
+
+go 1.14
+
+require (
+	github.com/jinzhu/gorm v1.9.15
+)

ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/gorm.expected

@@ -0,0 +1,9 @@
+| gorm.go:15:11:15:19 | untrusted |
+| gorm.go:16:9:16:17 | untrusted |
+| gorm.go:17:11:17:19 | untrusted |
+| gorm.go:18:8:18:16 | untrusted |
+| gorm.go:19:12:19:20 | untrusted |
+| gorm.go:20:11:20:19 | untrusted |
+| gorm.go:21:11:21:19 | untrusted |
+| gorm.go:22:12:22:20 | untrusted |
+| gorm.go:23:11:23:19 | untrusted |

ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/gorm.go

@@ -0,0 +1,25 @@
+package gormtest
+
+import (
+	"github.com/jinzhu/gorm"
+)
+
+func getUntrustedString() string {
+	return "trouble"
+}
+
+func main() {
+
+	db := gorm.DB{}
+	untrusted := getUntrustedString()
+	db.Where(untrusted)
+	db.Not(untrusted)
+	db.Order(untrusted)
+	db.Or(untrusted)
+	db.Select(untrusted)
+	db.Table(untrusted)
+	db.Group(untrusted)
+	db.Having(untrusted)
+	db.Joins(untrusted)
+
+}

ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/gorm.ql

@@ -0,0 +1,4 @@
+import go
+
+from SQL::QueryString qs
+select qs