Skip to content

Commit 370ae94

Browse files
data-douserCopilot
andauthored
Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com>
1 parent bb4598c commit 370ae94

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

docs/ql-mcp/prompts.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@ The server provides **11 prompts** that guide AI assistants through common CodeQ
1515
| `ql_lsp_iterative_development` | Iterative CodeQL query development using LSP tools for completion, navigation, and validation |
1616
| `ql_tdd_advanced` | Advanced test-driven CodeQL development with AST visualization, control flow, and call graph analysis |
1717
| `ql_tdd_basic` | Test-driven CodeQL query development checklist — write tests first, implement query, iterate until tests pass |
18+
| `run_query_and_summarize_false_positives` | Run a CodeQL query and summarize its false positives |
1819
| `sarif_rank_false_positives` | Analyze SARIF results to identify likely false positives in CodeQL query results |
1920
| `sarif_rank_true_positives` | Analyze SARIF results to identify likely true positives in CodeQL query results |
20-
| `run_query_and_summarize_false_positives` | Run a CodeQL query and summarize its false positives |
2121
| `test_driven_development` | Test-driven development workflow for CodeQL queries using MCP tools |
2222
| `tools_query_workflow` | Guide for using built-in tools queries (PrintAST, PrintCFG, CallGraphFrom, CallGraphTo) to understand code structure |
2323
| `workshop_creation_workflow` | Guide for creating CodeQL query development workshops from production-grade queries |

server/src/prompts/run-query-and-summarize-false-positives.prompt.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ The tool `read_database_source` can be used to read the code of a particular fin
4444
3. Stop early.
4545
- Grouping the potential false positive cases is more important than exhaustively verifying every single finding.
4646
- A common false positive likely introduces some false positives that are very hard to verify, so it is usually better to focus on simple cases first.
47-
- Truly hard-to-verify false positive cases are often in code that users don't expect to be condusive to static analysis, and query authors often don't expect their queries to work well in those cases.
47+
- Truly hard-to-verify false positive cases are often in code that users don't expect to be conducive to static analysis, and query authors often don't expect their queries to work well in those cases.
4848
- Suggest a chainsaw approach rather than a scalpel - if a result may be a false positive, identify some simple heuristics to eliminate all such complex cases, even if such a hueristic could introduce false negatives.
4949

5050
### What Makes a Result Likely to be a False Positive?

0 commit comments

Comments
 (0)