From 1d89b80c69d444da1511926dc4e190cbb860bbbf Mon Sep 17 00:00:00 2001 From: Jordy Cabannes Date: Thu, 28 Mar 2024 10:59:53 +0100 Subject: [PATCH] fix: ignore docs and tests files for codeql and devskim scanning --- .github/workflows/codeql.yml | 32 ++++++++++++++++++++++++++++++++ .github/workflows/devskim.yml | 2 +- 2 files changed, 33 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 000000000..080117113 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,32 @@ +name: CodeQL + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + schedule: + - cron: '0 0 * * 1' + +jobs: + codeql: + name: CodeQL code scanning + runs-on: ubuntu-latest + permissions: + security-events: write + steps: + - name: Checkout code + uses: actions/checkout@v3 + + - name: Init CodeQL + uses: github/codeql-action/init@v3 + with: + languages: javascript-typescript + config: | + paths-ignore: + - docs + - '**/__testData__/**' + - '**/*.test.ts' + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 \ No newline at end of file diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml index 0c7c889aa..472a30924 100644 --- a/.github/workflows/devskim.yml +++ b/.github/workflows/devskim.yml @@ -28,7 +28,7 @@ jobs: - name: Run DevSkim scanner uses: microsoft/DevSkim-Action@v1 with: - ignore-globs: "docs/**,**/__testData__/**,**/*.test.ts" + ignore-globs: "**/docs/**,**/__testData__/**,**/*.test.ts" - name: Upload DevSkim scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2