Commit 2338630
tools: enable CodeQL config file
A previous change designed to ignore test files in CodeQL scans had
multiple problems. This fixes the CodeQL scan breakage. It adds a
CodeQL config file, which allows us to ignore the test directory
in our scans.
Refs: #57978 (comment)
Refs: https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#specifying-directories-to-scan
PR-URL: #58036
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>1 parent e5bf67f commit 2338630
2 files changed
Lines changed: 5 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,4 @@ | |||
| 1 | + name: CodeQL config | ||
| 2 | + | ||
| 3 | + paths-ignore: | ||
| 4 | + - test | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -7,9 +7,6 @@ on: | |||
| 7 | 7 | permissions: | |
| 8 | 8 | contents: read | |
| 9 | 9 | ||
| 10 | - paths-to-ignore: | ||
| 11 | - - test | ||
| 12 | - | ||
| 13 | 10 | jobs: | |
| 14 | 11 | analyze: | |
| 15 | 12 | name: Analyze | |
@@ -33,6 +30,7 @@ jobs: | |||
| 33 | 30 | uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 | |
| 34 | 31 | with: | |
| 35 | 32 | languages: ${{ matrix.language }} | |
| 33 | + config-file: ./.github/codeql-config.yml | ||
| 36 | 34 | ||
| 37 | 35 | - name: Autobuild | |
| 38 | 36 | uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 | |
0 commit comments