search

github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
https://codeql.github.com
MIT License
7.48k stars 1.49k forks source link

LGTM.com - false positive #7234

Open simontorres opened 2 years ago

simontorres commented 2 years ago

Description of the false positive

The lines in question are log messages with a file path and file name that the user needs to know othewise the message is useless

URL to the alert on the project page on LGTM.com https://lgtm.com/projects/g/soar-telescope/goodman_pipeline/snapshot/3a94b38f6aa18d38068665a6a179ffb2090a4d76/files/goodman_pipeline/core/core.py?sort=name&dir=ASC&mode=heatmap#x961f9116bdb66d55:1

It seems to me that the link does not take me to the right location of the alert so I'm adding a link with references to the line itself. https://lgtm.com/projects/g/soar-telescope/goodman_pipeline/snapshot/3a94b38f6aa18d38068665a6a179ffb2090a4d76/files/goodman_pipeline/core/core.py?sort=name&dir=ASC&mode=heatmap#L3290

and https://lgtm.com/projects/g/soar-telescope/goodman_pipeline/snapshot/3a94b38f6aa18d38068665a6a179ffb2090a4d76/files/goodman_pipeline/core/core.py?sort=name&dir=ASC&mode=heatmap#L3313

MathiasVP commented 2 years ago

Hi @simontorres,

Thanks for opening this issue. I've forwarded this false positive to the Python team.

simontorres commented 2 years ago

Thanks @MathiasVP