github / github/codeql

Excluding filepaths from CodeQL CLI at analysis

Open
#12,811 5 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**Excluding filepaths from CodeQL CLI at analysis**

Hi,

I want to know if there is a way to exclude certain files and directories from CodeQL analysis (_**after the database has been built**_). Our last resort would be filtering results out of the SARIF **after** analysis, but we want to know if there is a way to do it **at** analysis time.

Someone on my team noticed a query that appears to have some file exclusion happening:

https://github.com/github/codeql/blob/main/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/Exclusions.qll

Although I don't know if this would really be relevant to what we're trying to do. We are running queries from query packs specified in the CLI, something like this:

`codeql database analyze ${DATABASE_NAME} ${QUERYPACKS}`

Is there any way to apply a file exclusion query (similar to the JavaScript one linked above) on top of the query pack, or is this infeasible?

Thanks!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.