False positive on Static files

[s0umyad33p]

Minified and bundled JS and CSS files are being considered

We are currently rendering our frontend as static files through FastAPI . We are later going to make separate instances for frontend and backend. Currently, we have IAP enabled on our app engine application which is not allowing the communication between two different app engine apps using IAP.

Code samples or links to source code

Static files serving directories link
Link 1
Link 2

** Link to security alert **
Alerts

[mbg]

Hi @s0umyad33p 👋🏻

Your links are to private repositories, so we cannot access them. Can you either provide more information about how you have configured CodeQL (default or advanced setup, what the workflow is in the latter case) and what the structure of your project is?

Alternatively, if you cannot share this information publicly, please open a support ticket instead.