-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Python: Promote experimental queries #4583
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
DO NOT MERGE Also adds performance fix to `python.qll`.
This was a bit of a mess, since there was crosstalk between the TarSlip and PathInjection queries. (Also one of these needs the `options` file to be in one way, and the other not). To fix this, I split these out into separate directories.
@@ -0,0 +1 @@ | |||
semmle-extractor-options: --max-import-depth=2 -p ../lib |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the tests will fail due to ../lib
not being resolved in the same way as it used to.
For our purposes, I would be happy to accept not having any tests of the old queries. It might be controversial, but that is how I feel about it right now 😄
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hah, I was anticipating the opposite, hence the inclusion of the tests.
Anyway, at least this is better than my first attempt, which only included the tests! 🤦
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Besides the fact that I think the tests will fail, I think his PR looks good 👍 (and I'm happy to accept the easy from removing qhelp
and other non .ql
files)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
possibly 'deprecated' would be more appropriate than 'experimental', but I do not really care.
I am also fine with not having tests for the old queries, I mainly expect to run them locally on downloaded snapshots.
DO NOT MERGEAlso adds performance fix to
python.qll
.