v2.21.2rule error

[fuz2]

Description of the issue

[redsun82]

👋 @fuz2
A search for codeql "unknown kind table" turned up this result. That seems to be your case, as the java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql is indeed a query that is not meant to be running as part of database analysis, but rather as a support query for java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql.

So:

• if you intend to run the whole java query suite, you should run a .qls file rather than run all .ql files. You could go for java/ql/src/codeql-suites/java-code-scanning.qls for high accuracy security queries, or in the same directory java-security-extended.qls and java-security-and-quality.qls for progressively more queries.
• if you're interested in the results of that query specifically, you should not run it with codeql database analyze, but rather with codeql query run java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql --database=<your-database>, or load the database into VSCode and run the query from there.

[fuz2]

this is current cmd：codeql database analyze D:\tools\codeQl\temp\newBee java\ql\src\Security\ --format=csv --output=result2.csv

UntrustedDataToExternalAPI，

I understand now. This rule cannot be run alone.

thank you.

[redsun82]

indeed, glad that helped! If you want to run all security queries you can change your command to

codeql database analyze D:\tools\codeQl\temp\newBee java\ql\src\codeql-suites\java-security-extended.qls --format=csv --output=result2.csv