Skip to content

fix(codeql): exclude generated dist artifacts from analysis#216

Merged
davida-ps merged 1 commit intomainfrom
codex/fix-codeql-ignore-dist-alert-30
May 4, 2026
Merged

fix(codeql): exclude generated dist artifacts from analysis#216
davida-ps merged 1 commit intomainfrom
codex/fix-codeql-ignore-dist-alert-30

Conversation

@davida-ps
Copy link
Copy Markdown
Collaborator

@davida-ps davida-ps commented May 4, 2026

Summary

  • add a CodeQL config file in .github/codeql/codeql-config.yml
  • ignore generated dist artifacts from code scanning
  • wire the config into the CodeQL workflow init step

Security Benefit

  • reduces false positives from minified generated bundles
  • keeps CodeQL findings focused on maintained source files

Testing

  • verified git diff and PR file list
  • no runtime code changes

@davida-ps davida-ps force-pushed the codex/fix-codeql-ignore-dist-alert-30 branch from 06ae33b to 1976305 Compare May 4, 2026 08:03
@davida-ps davida-ps merged commit 72663ab into main May 4, 2026
13 checks passed
@davida-ps davida-ps deleted the codex/fix-codeql-ignore-dist-alert-30 branch May 4, 2026 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant