From 8fea14d4d5e9149dd90d14eb7efa9f803a83efe4 Mon Sep 17 00:00:00 2001 From: Phillip9587 Date: Mon, 28 Apr 2025 22:32:30 +0200 Subject: [PATCH 1/2] ci: add codeql github workflows scanning --- .github/workflows/codeql.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 57bed1fac96..a698a0b7230 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,6 +31,10 @@ jobs: actions: read contents: read security-events: write + strategy: + fail-fast: false + matrix: + language: [javascript, actions] steps: - name: Checkout repository @@ -40,7 +44,7 @@ jobs: - name: Initialize CodeQL uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13 with: - languages: javascript + languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. # Prefix the list here with "+" to use these queries and those in the config file. @@ -62,5 +66,3 @@ jobs: - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13 - with: - category: "/language:javascript" From de0d2c49e019c3ff9fb79be37b5c7daf902818dc Mon Sep 17 00:00:00 2001 From: Phillip9587 Date: Mon, 28 Apr 2025 22:33:53 +0200 Subject: [PATCH 2/2] ci: update CodeQL config to ignore the test directory --- .github/workflows/codeql.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a698a0b7230..7c24d09a1b9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -45,6 +45,9 @@ jobs: uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13 with: languages: ${{ matrix.language }} + config: | + paths-ignore: + - test # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. # Prefix the list here with "+" to use these queries and those in the config file.