diff --git a/go/ql/lib/semmle/go/dataflow/ExternalFlow.qll b/go/ql/lib/semmle/go/dataflow/ExternalFlow.qll index 2ee93b59ab282..1648560029f21 100644 --- a/go/ql/lib/semmle/go/dataflow/ExternalFlow.qll +++ b/go/ql/lib/semmle/go/dataflow/ExternalFlow.qll @@ -113,7 +113,8 @@ private string getPackage(string packageOrGroup) { /** * Holds if a source model exists for the given parameters. * - * Note that we consider all packages in the same group. + * Note that `group:` references are expanded into one or more actual packages + * by this predicate. */ predicate sourceModel( string package, string type, boolean subtypes, string name, string signature, string ext, @@ -128,7 +129,8 @@ predicate sourceModel( /** * Holds if a sink model exists for the given parameters. * - * Note that we consider all packages in the same group. + * Note that `group:` references are expanded into one or more actual packages + * by this predicate. */ predicate sinkModel( string package, string type, boolean subtypes, string name, string signature, string ext, @@ -143,7 +145,8 @@ predicate sinkModel( /** * Holds if a summary model exists for the given parameters. * - * Note that we consider all packages in the same group. + * Note that `group:` references are expanded into one or more actual packages + * by this predicate. */ predicate summaryModel( string package, string type, boolean subtypes, string name, string signature, string ext, @@ -158,7 +161,8 @@ predicate summaryModel( /** * Holds if a neutral model exists for the given parameters. * - * Note that we consider all packages in the same group. + * Note that `group:` references are expanded into one or more actual packages + * by this predicate. */ predicate neutralModel( string package, string type, string name, string signature, string kind, string provenance