Skip to content

CodeQL Synthetic Config - Add additional 3rd party paths to ignore #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Aug 20, 2024

Conversation

felickz
Copy link
Contributor

@felickz felickz commented Jul 23, 2024

This is currently the best reference that aggregates this list of installed/vendored dependency folders that cause CodeQL to report vulns in 3rd party code.

Ex /deps: https://github.com/nodejs/node/tree/main/deps

Ruby test frameworks added:

# Ruby
- "**/gems/**"
- "**/spec/**/*_spec.rb"
- "**/test/**/*_test.rb"

pwntester
pwntester previously approved these changes Aug 1, 2024
@felickz
Copy link
Contributor Author

felickz commented Aug 19, 2024

FYI i am unable to merge this even after approved

Merging is blocked
You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.

@GeekMasher GeekMasher merged commit 7e5b552 into main Aug 20, 2024
12 checks passed
@GeekMasher GeekMasher deleted the common-3rd-party-paths branch August 20, 2024 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants