How to add an AdditionalTaintStep globally ?

[hugo-syn]

Hi, I would like to define and import an TaintTracking::AdditionalTaintStep for all the default path queries. Is it possible to do this ? If yes how can I do this, maybe with the extension model feature but I'm not sure.

Thanks :)

[hugo-syn]

I found Customization.qll which seems a good candidate, but I have a file for each pack I don't know which one I should modify

[owen-mc]

Which language are you analyzing?

[hugo-syn]

Which language are you analyzing?

I'm analyzing Java

[smowton]

Is https://codeql.github.com/docs/codeql-language-guides/customizing-library-models-for-java-and-kotlin/ useful for your use case? That specifically handles additional taint steps that relate to library methods, e.g. propagating taint from a particular function call's parameter to its return value.

[hugo-syn]

I would like to add a more complex additional step like the ones here, but globally: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/blob/7a6a71525bd2d3466718bd36b4c5b1b114bac532/java/lib/ResearchMode.qll#L86