Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Allow to specify the relevant threat model when running a query #4027

Copy link
Copy link
@intrigus-lgtm

Description

@intrigus-lgtm
Issue body actions

Is your feature request related to a problem? Please describe.
The codeql CLI interface offers the option to specify a threat model by e.g. using the --threat-model local flag.
However, as far as I'm aware, there is not such feature in the IDE itself to configure the threat model.

Describe the solution you'd like
Either:

  • add a dropdown when running a query using CodeQL: Run Query on Selected Database where the user has to select the threat model every time they run a query
  • add a global config option to the plugin (could be problematic when different languages potentially support different threat models)
  • add a new CodeQL: Run Query on Selected Database with Thread Model option.
  • add a "Set Threat Model" for database command.

Describe alternatives you've considered
Run the query on the db using codeql database analyze yada yada yada --threat-model local.
However, looking at the result in SARIF isn't as nice as looking at the result of the CodeQL extension directly in the IDE.

p-

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Morty Proxy This is a proxified and sanitized view of the page, visit original site.