自定义安全流程配置 workflows的 codeql.yml文件时，如何配置 可以加载官网CWE的ql规则文件级别是 * @precision low的

[Yangxl88]

期待答复，谢谢

[smowton]

Since it isn't included in a default query suite, try adding it directly to your codeql-init action's options:

    - name: Initialize CodeQL
      uses: github/codeql-action/init@v3
      with:
        packs: codeql/java-queries:Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql

Note that if you're using a matrix build for multiple languages, you might need to set this in the matrix specification and use this instead, similar to how matrix builds usually treat the languages option:

      with:
        packs: ${{ matrix.packs }}

[Yangxl88]

Thanks ， I'll give it a try @smowton smowton