Skip to content

Add CodeQL configuration to exclude test and build artifacts#45

Merged
Nebu1eto merged 1 commit into
mainfrom
claude/codeql-exclude-tests-S17Qe
Feb 11, 2026
Merged

Add CodeQL configuration to exclude test and build artifacts#45
Nebu1eto merged 1 commit into
mainfrom
claude/codeql-exclude-tests-S17Qe

Conversation

@Nebu1eto

Copy link
Copy Markdown
Owner

Summary

This PR adds a CodeQL configuration file to customize code analysis by excluding test files, build outputs, and generated artifacts from security scanning.

Key Changes

  • Created .github/codeql/codeql-config.yml with path exclusions for:
    • Test directories (Rust tests/, benches/ and Node.js __test__/)
    • Example projects and benchmarks
    • Build outputs (target/, node_modules/, dist/)
    • Generated binding files (binding.js, binding.d.ts)
    • TypeScript compiled outputs in the sheetkit package
    • Test fixtures

Implementation Details

The configuration uses the paths-ignore directive to prevent CodeQL from analyzing non-source code, reducing noise in security analysis results and improving scan performance by focusing on actual application code rather than dependencies, tests, and generated files.

https://claude.ai/code/session_01GcGEVn7hAMb6Pwpsne26zM

@Nebu1eto
Nebu1eto marked this pull request as ready for review February 11, 2026 03:03
@Nebu1eto
Nebu1eto merged commit 837749e into main Feb 11, 2026
6 checks passed
@Nebu1eto
Nebu1eto deleted the claude/codeql-exclude-tests-S17Qe branch February 11, 2026 03:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants