[DIFF-INFORMED] Go: HardcodedCredentials

d10c · d10c · commit f228818b1f53 · 2025-07-17T11:46:35.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/Security/CWE-798/HardcodedCredentials.ql#L62
diff --git a/go/ql/lib/semmle/go/security/HardcodedCredentials.qll b/go/ql/lib/semmle/go/security/HardcodedCredentials.qll
@@ -30,6 +30,8 @@ module HardcodedCredentials {
     predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
 
     predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
+
+    predicate observeDiffInformedIncrementalMode() { any() }
   }
 
   /** Tracks taint flow for reasoning about hardcoded credentials. */

Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,8 @@ module HardcodedCredentials {`
`30`	`30`	`predicate isSink(DataFlow::Node sink) { sink instanceof Sink }`
`31`	`31`
`32`	`32`	`predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }`
	`33`	`+`
	`34`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`33`	`35`	`}`
`34`	`36`
`35`	`37`	`/** Tracks taint flow for reasoning about hardcoded credentials. */`