Skip to content

Conversation

@st3iny
Copy link
Member

@st3iny st3iny commented Jul 31, 2025

  • Resolves: CodeQL reporting violations inside minified code inside dist.

Summary

Do not scan the dist folder when running the CodeQL action.

Ref https://docs.github.com/en/code-security/code-scanning/troubleshooting-code-scanning/alerts-in-generated-code
Ref https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#specifying-directories-to-scan

Checklist

@st3iny st3iny self-assigned this Jul 31, 2025
@st3iny st3iny requested a review from a team as a code owner July 31, 2025 13:05
@st3iny st3iny requested review from ArtificialOwl and salmart-dev and removed request for a team July 31, 2025 13:06
@st3iny st3iny added the 3. to review Waiting for reviews label Jul 31, 2025
@st3iny st3iny requested review from sorbaugh and susnux July 31, 2025 13:06
Signed-off-by: Richard Steinmetz <[email protected]>
@st3iny st3iny force-pushed the ci/codeql/ignore-dist branch from b0d6a19 to ca641bc Compare July 31, 2025 13:10
@st3iny
Copy link
Member Author

st3iny commented Jul 31, 2025

This won't work as the config file input is only accepted for the init action:

- uses: github/codeql-action/init@v3
  with:
    config: my-conf.yml

@st3iny st3iny closed this Jul 31, 2025
@st3iny st3iny deleted the ci/codeql/ignore-dist branch July 31, 2025 14:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants