github / github/codeql

CI: Ignore path for compiled languages

Aperta
#5,618 9 commenti 1 reazione 0 assegnatari Vedi su GitHub
acknowledged enhancement
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

**Description of the issue**

I have implemented CodeQL scanning in workflow for [this](https://github.com/soumyamahunt/Notepads) project. It is a UWP app that uses xaml for UI and also uses additional tools like [cppwinrt](https://github.com/microsoft/cppwinrt). When CodeQL scanning is performed CodeQL produces alerts for [xaml compiler generated files](https://github.com/soumyamahunt/Notepads/security/code-scanning/688?query=ref%3Arefs%2Fheads%2Fadvanced-activation) and [cppwinrt generated header files](https://github.com/soumyamahunt/Notepads/security/code-scanning/4951?query=ref%3Arefs%2Fheads%2Fadvanced-activation). Since these kind of files that are generated by build tools aren't maintained by individual project maintainers it doesn't make sense to get code quality analysis for them (getting security analysis is fine). Is there anyway I can restrict analysis done for these kind of files??

**Additional Details**

Right now I am using [this](https://github.com/soumyamahunt/Notepads/blob/advanced-activation/.github/workflows/csa-bulk-dismissal.yml) workflow to manually dismiss these kind of alerts. However I want to automate it as soon as `Code scanning results` is published. Is there any way I can automate this??

![msedge_rpCDtTtdVW](https://user-images.githubusercontent.com/51203900/113818437-62e49180-9795-11eb-9ec2-a847d929e152.png)

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.