ci(codeql): specify which files to scan during analysis

Fdawgs · May 10, 2022 · 0ec3679 · 0ec3679
1 parent bc130e3
commit 0ec3679
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/.github/codeql-config.yml b/.github/codeql-config.yml
@@ -0,0 +1,13 @@
+name: "CodeQL Config"
+
+# **What it does**: This provides a config to the CodeQL GitHub Action in this repo.
+# **Why we have it**: Security scanning.
+
+queries:
+    - uses: security-and-quality
+
+# Limit the paths scanning takes place, improving speed of scan
+paths:
+    - "**/*.html"
+    - "**/*.js"
+    - "**/*.yml"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -37,7 +37,7 @@ jobs:
               uses: github/codeql-action/init@v2
               with:
                   languages: javascript
-                  queries: security-and-quality
+                  config-file: ./.github/codeql-config.yml
 
             - name: Perform CodeQL analysis
               uses: github/codeql-action/analyze@v2