edk2.qls: Allow error severity results and add new queries

The query cpp/conditionallyuninitializedvariable was initially
enabled with the CodeQL code because work was in progress on those
changes. The results were filtered out so CodeQL passed so we could
verify the CodeQL workflow without impacting CI results.

This change allows error severity messages and substitutes that query
with two queries that do not return failures. This allows these
queries to find future problems and prepares the CodeQL workflow to
catch future failures as queries are enabled.

Cc: Sean Brogan <sean.brogan@microsoft.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
Reviewed-by: Sean Brogan <sean.brogan@microsoft.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
This commit is contained in:
Michael Kubacki 2022-11-08 10:19:17 -05:00 committed by mergify[bot]
parent 179efe5d69
commit b0fd309719
2 changed files with 3 additions and 2 deletions

View File

@ -25,6 +25,5 @@ queries:
query-filters: query-filters:
- exclude: - exclude:
problem.severity: problem.severity:
- error
- warning - warning
- recommendation - recommendation

View File

@ -9,4 +9,6 @@
# Enable individual queries below. # Enable individual queries below.
- include: - include:
id: cpp/conditionallyuninitializedvariable id: cpp/infinite-loop-with-unsatisfiable-exit-condition
- include:
id: cpp/overflow-buffer