Add change note

smowton · smowton · commit 6d321e0151ac · 2022-10-29T11:40:57.000+01:00
diff --git a/go/ql/src/change-notes/2022-10-28-protobuf-cleartext-logging.md b/go/ql/src/change-notes/2022-10-28-protobuf-cleartext-logging.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Query `go/clear-text-logging` now excludes `GetX` methods of protobuf `Message` structs, except where taint is specifically known to belong to the right field. This is to avoid FPs where taint is written to one field and then spuriously read from another.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: minorAnalysis
 +---
 +* Query `go/clear-text-logging` now excludes `GetX` methods of protobuf `Message` structs, except where taint is specifically known to belong to the right field. This is to avoid FPs where taint is written to one field and then spuriously read from another.