Skip to content

Commit bf9aea6

Browse files
codexByron
authored andcommitted
Exclude imported tests from CodeQL analysis
The historical gitdb and smmap test suites contain intentional legacy uses of tempfile.mktemp. Importing them made GitPython's CodeQL workflow report new security findings even though the code is test-only and unchanged from the standalone projects. Ignore only the imported test directories while continuing to analyze all three production packages.
1 parent 205d4cc commit bf9aea6

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,10 @@ jobs:
6262
with:
6363
languages: ${{ matrix.language }}
6464
build-mode: ${{ matrix.build-mode }}
65+
config: |
66+
paths-ignore:
67+
- gitdb/gitdb/test/**
68+
- smmap/smmap/test/**
6569
# If you wish to specify custom queries, you can do so here or in a config file.
6670
# By default, queries listed here will override any specified in a config file.
6771
# Prefix the list here with "+" to use these queries and those in the config file.

0 commit comments

Comments
 (0)