Java: add extra known frameworks and sample negative samples to manage sarif file sizes

Stephan Brandauer · Stephan Brandauer · commit a89378d86d8e · 2023-05-26T13:20:04.000+02:00
diff --git a/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll b/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll
@@ -296,6 +296,9 @@ private class SkipFrameworkModeling extends CharacteristicsImpl::UninterestingTo
             "java.%", //
             "javax.%", //
             "org.apache%", //
+            "org.eclipse%", //
+            "org.gradle%", //
+            "org.slf4j%", //
           ])
   }
 }
diff --git a/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql b/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql
@@ -17,6 +17,7 @@ from
   ApplicationModeMetadataExtractor meta, string package, string type, boolean subtypes, string name,
   string signature, string input
 where
+  endpoint.getLocation().getStartLine() % 100 = 0 and
   characteristic.appliesToEndpoint(endpoint) and
   confidence >= SharedCharacteristics::highConfidence() and
   characteristic.hasImplications(any(NegativeSinkType negative), true, confidence) and

Original file line number	Diff line number	Diff line change
`@@ -296,6 +296,9 @@ private class SkipFrameworkModeling extends CharacteristicsImpl::UninterestingTo`
`296`	`296`	`"java.%", //`
`297`	`297`	`"javax.%", //`
`298`	`298`	`"org.apache%", //`
	`299`	`+ "org.eclipse%", //`
	`300`	`+ "org.gradle%", //`
	`301`	`+ "org.slf4j%", //`
`299`	`302`	`])`
`300`	`303`	`}`
`301`	`304`	`}`