Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 8d71d09

Browse files
authored
Merge pull request #234 from github/calumgrant/security-severities
Add security-severity metadata
2 parents 42c06bf + 46a0379 commit 8d71d09

4 files changed

Lines changed: 4 additions & 0 deletions

File tree

ql/src/queries/security/cwe-089/SqlInjection.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
* malicious SQL code by the user.
55
* @kind path-problem
66
* @problem.severity error
7+
* @security-severity 8.8
78
* @precision high
89
* @id rb/sql-injection
910
* @tags security

ql/src/queries/security/cwe-1333/ReDoS.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@
55
* attacks.
66
* @kind problem
77
* @problem.severity error
8+
* @security-severity 7.5
89
* @precision high
910
* @id rb/redos
1011
* @tags security

ql/src/queries/security/cwe-732/WeakFilePermissions.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
* @description Allowing files to be readable or writable by users other than the owner may allow sensitive information to be accessed.
44
* @kind path-problem
55
* @problem.severity warning
6+
* @security-severity 7.8
67
* @id rb/overly-permissive-file
78
* @tags external/cwe/cwe-732
89
* security

ql/src/queries/security/cwe-798/HardcodedCredentials.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
* @description Credentials are hard coded in the source code of the application.
44
* @kind path-problem
55
* @problem.severity error
6+
* @security-severity 9.8
67
* @precision high
78
* @id rb/hardcoded-credentials
89
* @tags security

0 commit comments

Comments
 (0)