Hacker News new | ask | show | jobs
Securing CodeQL queries using Semgrep (semgrep.dev)
11 points by brandonspark 806 days ago
1 comments

Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition.

Edit: missed what day it is

I mean, it's arguably a security concern if you're not catching the mistakes you intended to catch.