chore(ci) ignore test assets directories in CodeQL scans

Kong · Feb 7, 2024 · ce785b7 · ce785b7
1 parent 94e5d09
commit ce785b7
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/.github/actions/codeql-config.yml b/.github/actions/codeql-config.yml
@@ -0,0 +1,6 @@
+paths:
+  - src/
+  - lib/
+paths-ignore:
+  - work/
+  - t/
diff --git a/.github/workflows/job-codeql-analyzer.yml b/.github/workflows/job-codeql-analyzer.yml
@@ -40,6 +40,7 @@ jobs:
         uses: github/codeql-action/init@v2
         with:
           languages: ${{ inputs.language }}
+          config-file: ./.github/actions/codeql-config.yml
       - name: 'Setup cache - work/ dir'
         uses: actions/cache@v3
         if: ${{ !env.ACT }}
@@ -69,8 +70,9 @@ jobs:
         uses: advanced-security/filter-sarif@v1
         with:
           patterns: |
-            -**/*     # exclusion: DENY ALL
-            src/**/*  # inclusion
+            -**/*      # exclusion: DENY ALL
+            +src/**/*  # inclusion
+            +lib/**/*  # inclusion
           input: sarif-results/${{ steps.sarif-filename.outputs.name }}.sarif
           output: sarif-results/${{ steps.sarif-filename.outputs.name }}.sarif
       - name: Upload SARIF