Skip to content

Commit 1b5b12c

Browse files
authored
tools: ignore test directory in CodeQL scans
Scanning the test directory results in many false positives about hard-coded credentials. We want the code scan for user-exectuable code and possibly our tools, but not generally for tests. Ignore the test directory in CodeQL scans. A long list of false positives makes it harder to interpret the result of CodeQL runs. PR-URL: #57978 Reviewed-By: Yagiz Nizipli <[email protected]> Reviewed-By: James M Snell <[email protected]>
1 parent b665127 commit 1b5b12c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/codeql.yml

+3
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
permissions:
88
contents: read
99

10+
paths-to-ignore:
11+
- test
12+
1013
jobs:
1114
analyze:
1215
name: Analyze

0 commit comments

Comments
 (0)