Skip to content

Commit

Permalink
ci: disable evalutations that arecausing codeql timeouts
Browse files Browse the repository at this point in the history
Disabling js/bad-code-sanitization and js/regex-injection because a recent update caused tons of
 timeouts and we don't have anything where cryptographic usage is ultra important in our use cases.

(cherry picked from commit 6553452)
  • Loading branch information
josephperrott authored and alan-agius4 committed Jan 31, 2025
1 parent f535230 commit 5bfbf2e
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 4 deletions.
8 changes: 8 additions & 0 deletions .github/codeql/config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
name: 'Angular CLI CodeQL config'

query-filters:
# TODO(josephperrott): reevaluate if these can be reenabled.
- exclude:
id: js/bad-code-sanitization
- exclude:
id: js/regex-injection
5 changes: 1 addition & 4 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,10 +15,6 @@ jobs:
packages: read
strategy:
fail-fast: false
matrix:
include:
- language: javascript-typescript
build-mode: none
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
Expand All @@ -29,6 +25,7 @@ jobs:
with:
languages: javascript-typescript
build-mode: none
config-file: .github/codeql/config.yml
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe #v3.28.8
with:
Expand Down

0 comments on commit 5bfbf2e

Please sign in to comment.