Removed false positive injection sink models for the skip-collectors input of veracode/veracode-sca.

XinyuZhangXvX · XinyuZhangXvX · commit 2da9ddbff60c · 2026-03-27T19:01:45.000-04:00
diff --git a/actions/ql/lib/ext/manual/veracode_veracode-sca.model.yml b/actions/ql/lib/ext/manual/veracode_veracode-sca.model.yml
@@ -5,5 +5,4 @@ extensions:
     data:
       - ["veracode/veracode-sca", "*", "input.url", "command-injection", "manual"]
       - ["veracode/veracode-sca", "*", "input.path", "command-injection", "manual"]
-      - ["veracode/veracode-sca", "*", "input.skip-collectors", "command-injection", "manual"]
       - ["veracode/veracode-sca", "*", "input.url", "command-injection", "manual"]
diff --git a/actions/ql/src/change-notes/2026-03-27-veracode#veracode-sca.md b/actions/ql/src/change-notes/2026-03-27-veracode#veracode-sca.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Removed false positive injection sink models for the `skip-collectors` input of `veracode/veracode-sca`.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: minorAnalysis
 +---
 +* Removed false positive injection sink models for the `skip-collectors` input of `veracode/veracode-sca`.