From a3f406d3f8c5d81b2beca8bd0a2fc4645798fa93 Mon Sep 17 00:00:00 2001 From: Renn F Date: Wed, 21 Oct 2026 02:30:53 +0200 Subject: [PATCH] ci(codeql): keep the engine checkout out of the scan --- .github/codeql/codeql-config.yml | 5 +++++ .github/workflows/code-ql.yml | 1 + 2 files changed, 6 insertions(+) create mode 100644 .github/codeql/codeql-config.yml diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml new file mode 100644 index 0000000..21bc960 --- /dev/null +++ b/.github/codeql/codeql-config.yml @@ -0,0 +1,5 @@ +name: guard-agent-jvm CodeQL +# The workflow checks the engine out under guard-core-jvm/ for the composite build. The engine is scanned in its own +# repository, so its files stay out of this one's results. +paths-ignore: + - guard-core-jvm diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml index 11d3f21..9cfc27c 100644 --- a/.github/workflows/code-ql.yml +++ b/.github/workflows/code-ql.yml @@ -48,6 +48,7 @@ jobs: uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 with: languages: kotlin,python,actions + config-file: ./.github/codeql/codeql-config.yml - name: Autobuild uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0