diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6c0df92..c6704c0 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -32,6 +32,9 @@ jobs: java-version: '11' distribution: 'temurin' + # Initialize CodeQL with custom configuration + # - Excludes specific queries that may generate noise + # - Ignores test paths to focus on production code - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: @@ -39,6 +42,17 @@ jobs: queries: +security-and-quality build-mode: none dependency-caching: true + config: | + query-filters: + - exclude: + id: java/missing-call-to-super-finalize + - exclude: + id: java/unread-local-variable + paths-ignore: + - '**/test/**' + - '**/tests/**' + - '**/*Test.java' + - '**/*Tests.java' # Autobuild attempts to build any compiled languages (Java, C#, Go, etc.) # If this step fails, remove it and run the build manually instead