Add lgtm explanation#4362
Conversation
|
Thanx! Note that I don't know if a justification in the old style suppression format will be accepted. The internal guide to resolve the issue just mentions the "// CodeQL [query-id] Justification" format, which IIUC needs to be in a comment on its own line (not appended to the code). From my searches in the codeql public documentation, the only mention of suppressions (old or new) is in the release notes of CodeQL 2.12.0 announcing support for the new format, and from looking at documentation for the CodeQL scanning offered here on GitHub, they seem to be using 2.17.0, so that should work fine. I'd encourage you to try it. |
|
I opened support requests on both CodeQL here on github and on the internal team managing CodeQL policies, but I've heard nothing from either. I say go ahead and complete this as-is. It's an improvement and I expect it will suffice. If changing the suppression style becomes needed, it'll be a problem for another day. Thank you! |
Add explanation to CodeQL suppression. Change was pulled directly from nlohmann/json nlohmann/json#4362

Closes #4361 by adding a comment why
gotoshould not be considered harmful in the number parser.