From ac4b779e5b723423c6ea09a38fe6d5ba912f72ec Mon Sep 17 00:00:00 2001 From: confused-Techie Date: Sun, 13 Nov 2022 23:47:35 -0800 Subject: [PATCH] Add codql config file --- .github/workflows/codeql.yml | 3 +-- codeql-config.yml | 9 +++++++++ 2 files changed, 10 insertions(+), 2 deletions(-) create mode 100644 codeql-config.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8c6ea213..82d818b4 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,8 +33,6 @@ jobs: fail-fast: false matrix: language: [ 'javascript' ] - # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] - # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support steps: - name: Checkout repository @@ -44,6 +42,7 @@ jobs: - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: + config-file: ./codeql-config.yml languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. diff --git a/codeql-config.yml b/codeql-config.yml new file mode 100644 index 00000000..08e21f7c --- /dev/null +++ b/codeql-config.yml @@ -0,0 +1,9 @@ +name: "CodeQL Config" + +queries: security-extended,security-and-quality + +paths-ignore: + - ./src/tests + - ./src/tests_integration + +# https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors