github / github/codeql

CI: Ignore path for compiled languages

Aberta
#5,618 9 comentários 1 reação 0 responsáveis Ver no GitHub
acknowledged enhancement
Linguagem predominante
CodeQL
Estrelas
10.1k
Forks
2.1k
Merge médio
2d 15h
PRs com merge (30d)
141

Descrição

**Description of the issue**

I have implemented CodeQL scanning in workflow for [this](https://github.com/soumyamahunt/Notepads) project. It is a UWP app that uses xaml for UI and also uses additional tools like [cppwinrt](https://github.com/microsoft/cppwinrt). When CodeQL scanning is performed CodeQL produces alerts for [xaml compiler generated files](https://github.com/soumyamahunt/Notepads/security/code-scanning/688?query=ref%3Arefs%2Fheads%2Fadvanced-activation) and [cppwinrt generated header files](https://github.com/soumyamahunt/Notepads/security/code-scanning/4951?query=ref%3Arefs%2Fheads%2Fadvanced-activation). Since these kind of files that are generated by build tools aren't maintained by individual project maintainers it doesn't make sense to get code quality analysis for them (getting security analysis is fine). Is there anyway I can restrict analysis done for these kind of files??

**Additional Details**

Right now I am using [this](https://github.com/soumyamahunt/Notepads/blob/advanced-activation/.github/workflows/csa-bulk-dismissal.yml) workflow to manually dismiss these kind of alerts. However I want to automate it as soon as `Code scanning results` is published. Is there any way I can automate this??

![msedge_rpCDtTtdVW](https://user-images.githubusercontent.com/51203900/113818437-62e49180-9795-11eb-9ec2-a847d929e152.png)

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.