Skip to content

Commit 6553452

Browse files
josephperrottalan-agius4
authored andcommitted
ci: disable evalutations that arecausing codeql timeouts
Disabling js/bad-code-sanitization and js/regex-injection because a recent update caused tons of timeouts and we don't have anything where cryptographic usage is ultra important in our use cases.
1 parent 09cb935 commit 6553452

File tree

2 files changed

+9
-4
lines changed

2 files changed

+9
-4
lines changed

.github/codeql/config.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
name: 'Angular CLI CodeQL config'
2+
3+
query-filters:
4+
# TODO(josephperrott): reevaluate if these can be reenabled.
5+
- exclude:
6+
id: js/bad-code-sanitization
7+
- exclude:
8+
id: js/regex-injection

.github/workflows/codeql.yml

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,6 @@ jobs:
1515
packages: read
1616
strategy:
1717
fail-fast: false
18-
matrix:
19-
include:
20-
- language: javascript-typescript
21-
build-mode: none
2218
steps:
2319
- name: Checkout repository
2420
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -29,6 +25,7 @@ jobs:
2925
with:
3026
languages: javascript-typescript
3127
build-mode: none
28+
config-file: .github/codeql/config.yml
3229
- name: Perform CodeQL Analysis
3330
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe #v3.28.8
3431
with:

0 commit comments

Comments
 (0)