Merge pull request github#3736 from rneatherway/exclude-cs-vulnerable-package

jbj · web-flow · commit 39137510ba9d · 2020-06-22T17:27:23.000+02:00
Exclude dependency-based query from C# Code Scanning
diff --git a/csharp/ql/src/codeql-suites/csharp-code-scanning.qls b/csharp/ql/src/codeql-suites/csharp-code-scanning.qls
@@ -2,3 +2,5 @@
 - qlpack: codeql-csharp
 - apply: code-scanning-selectors.yml
   from: codeql-suite-helpers
+- apply: codeql-suites/exclude-dependency-queries.yml
+  from: codeql-csharp
diff --git a/csharp/ql/src/codeql-suites/csharp-security-and-quality.qls b/csharp/ql/src/codeql-suites/csharp-security-and-quality.qls
@@ -2,3 +2,5 @@
 - qlpack: codeql-csharp
 - apply: security-and-quality-selectors.yml
   from: codeql-suite-helpers
+- apply: codeql-suites/exclude-dependency-queries.yml
+  from: codeql-csharp
diff --git a/csharp/ql/src/codeql-suites/csharp-security-extended.qls b/csharp/ql/src/codeql-suites/csharp-security-extended.qls
@@ -2,3 +2,5 @@
 - qlpack: codeql-csharp
 - apply: security-extended-selectors.yml
   from: codeql-suite-helpers
+- apply: codeql-suites/exclude-dependency-queries.yml
+  from: codeql-csharp
diff --git a/csharp/ql/src/codeql-suites/exclude-dependency-queries.yml b/csharp/ql/src/codeql-suites/exclude-dependency-queries.yml
@@ -0,0 +1,4 @@
+- description: C# queries which overlap with dependency analysis
+- exclude:
+    query path:
+      - Security Features/CWE-937/VulnerablePackage.ql
