test: ✅ Fix Codacy config

#37

.github/codeql/codeql-config.yml

@@ -0,0 +1,6 @@
+name: "CodeQL config"
+
+paths-ignore:
+  - install
+  - tmp
+  - output

.github/workflows/codacy-analysis.yaml

@@ -1,3 +1,5 @@
+# https://github.com/github/codeql-action
+
 name: Codacy Security Scan
 
 on: [push, pull_request]
@@ -7,21 +9,25 @@ jobs:
     name: Codacy Security Scan
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code
-        uses: actions/checkout@master
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      # - name: Initialize CodeQL
+      #   uses: github/codeql-action/init@v1
+      #   with:
+      #     config-file: ./.github/codeql/codeql-config.yml
+      #
+      # - name: Perform CodeQL Analysis
+      #   uses: github/codeql-action/analyze@v1
 
       - name: Run Codacy Analysis CLI
         uses: codacy/codacy-analysis-cli-action@master
         with:
           output: results.sarif
           format: sarif
-          # Adjust severity of non-security issues
           gh-code-scanning-compat: true
-          # Force 0 exit code to allow SARIF file generation
-          # This will handover control about PR rejection to the GitHub side
           max-allowed-issues: 2147483647
 
-      # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file
         uses: github/codeql-action/upload-sarif@main
         with: