Use shared SensitiveDataHeuristics library

Author: jketema

javascript/ql/lib/qlpack.yml

@@ -9,6 +9,7 @@ dependencies:
   codeql/dataflow: ${workspace}
   codeql/mad: ${workspace}
   codeql/regex: ${workspace}
+  codeql/security: ${workspace}
   codeql/ssa: ${workspace}
   codeql/threat-models: ${workspace}
   codeql/tutorial: ${workspace}

javascript/ql/lib/semmle/javascript/security/SensitiveActions.qll

@@ -10,7 +10,7 @@
  */
 
 import javascript
-import semmle.javascript.security.internal.SensitiveDataHeuristics
+import codeql.security.internal.SensitiveDataHeuristics
 private import HeuristicNames
 
 /** An expression that might contain sensitive data. */

python/ql/lib/qlpack.yml

@@ -9,6 +9,7 @@ dependencies:
   codeql/dataflow: ${workspace}
   codeql/mad: ${workspace}
   codeql/regex: ${workspace}
+  codeql/security: ${workspace}
   codeql/threat-models: ${workspace}
   codeql/tutorial: ${workspace}
   codeql/util: ${workspace}

python/ql/lib/semmle/python/dataflow/new/SensitiveDataSources.qll

@@ -7,7 +7,7 @@ private import python
 private import semmle.python.dataflow.new.DataFlow
 // Need to import `semmle.python.Frameworks` since frameworks can extend `SensitiveDataSource::Range`
 private import semmle.python.Frameworks
-private import semmle.python.security.internal.SensitiveDataHeuristics as SensitiveDataHeuristics
+private import codeql.security.internal.SensitiveDataHeuristics as SensitiveDataHeuristics
 private import semmle.python.ApiGraphs
 
 // We export these explicitly, so we don't also export the `HeuristicNames` module.

ruby/ql/lib/codeql/ruby/security/SensitiveActions.qll

@@ -11,7 +11,7 @@
 
 private import codeql.ruby.AST
 private import codeql.ruby.DataFlow
-import codeql.ruby.security.internal.SensitiveDataHeuristics
+import codeql.security.internal.SensitiveDataHeuristics
 private import HeuristicNames
 private import codeql.ruby.CFG
 

ruby/ql/lib/codeql/ruby/security/internal/CleartextSources.qll

@@ -8,8 +8,8 @@ private import codeql.ruby.AST
 private import codeql.ruby.DataFlow
 private import codeql.ruby.TaintTracking::TaintTracking
 private import codeql.ruby.dataflow.RemoteFlowSources
-private import SensitiveDataHeuristics::HeuristicNames
-private import SensitiveDataHeuristics
+private import codeql.security.internal.SensitiveDataHeuristics::HeuristicNames
+private import codeql.security.internal.SensitiveDataHeuristics
 private import codeql.ruby.CFG
 private import codeql.ruby.dataflow.SSA
 

ruby/ql/lib/qlpack.yml

@@ -10,6 +10,7 @@ dependencies:
   codeql/dataflow: ${workspace}
   codeql/mad: ${workspace}
   codeql/regex: ${workspace}
+  codeql/security: ${workspace}
   codeql/ssa: ${workspace}
   codeql/tutorial: ${workspace}
   codeql/util: ${workspace}

rust/ql/lib/codeql/rust/security/SensitiveData.qll

@@ -6,7 +6,7 @@
  */
 
 import rust
-import internal.SensitiveDataHeuristics
+import codeql.security.internal.SensitiveDataHeuristics
 private import codeql.rust.dataflow.DataFlow
 
 /**

rust/ql/lib/qlpack.yml

@@ -11,6 +11,7 @@ dependencies:
   codeql/regex: ${workspace}
   codeql/threat-models: ${workspace}
   codeql/mad: ${workspace}
+  codeql/security: ${workspace}
   codeql/ssa: ${workspace}
   codeql/tutorial: ${workspace}
   codeql/typeinference: ${workspace}

swift/ql/lib/codeql/swift/security/SensitiveExprs.qll

@@ -5,7 +5,7 @@
  */
 
 import swift
-import internal.SensitiveDataHeuristics
+import codeql.security.internal.SensitiveDataHeuristics
 private import codeql.swift.dataflow.DataFlow
 private import codeql.swift.dataflow.ExternalFlow