4 ms·
CodeQL was a good help on some projects, but more recently, our team has been increasingly frustrated by the thing to the point of turning it off. The latest d
by madarcho 7mo ago
CodeQL was a good help on some projects, but more recently, our team has been increasingly frustrated by the thing to the point of turning it off.
The latest drop in the bucket was a comment adding a useless intermediate variable, with the justification being “if you do this, you’ll avoid CodeQL flagging you for the problem”.
Sounds like slight overfitting to the data!
- missingdays 7mo agoSo, CodeQL found a vulnerability in your code, you avoided the warning by adding an intermediate variable (but ignored the vulnerability), and you are frustrated with CodeQL, not the person who added this variable?
- mwcz 7mo agoIf I read it correctly, the comment suggesting the intermediate variable was from CodeQL itself.