Skip to content

Commit 564e019

Browse files
committed
ci: disable evalutations that arecausing codeql timeouts
Disabling js/bad-code-sanitization and js/regex-injection because a recent update caused tons of timeouts and we don't have anything where cryptographic usage is ultra important in our use cases.
1 parent 19c1f53 commit 564e019

File tree

2 files changed

+9
-4
lines changed

2 files changed

+9
-4
lines changed

.github/codeql/config.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
name: 'Angular CLI CodeQL config'
2+
3+
query-filters:
4+
# TODO(josephperrott): reevaluate if these can be reenabled.
5+
- exclude:
6+
id: js/bad-code-sanitization
7+
- exclude:
8+
id: js/regex-injection

.github/workflows/codeql.yml

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,6 @@ jobs:
1616
packages: read
1717
strategy:
1818
fail-fast: false
19-
matrix:
20-
include:
21-
- language: javascript-typescript
22-
build-mode: none
2319
steps:
2420
- name: Checkout repository
2521
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -30,6 +26,7 @@ jobs:
3026
with:
3127
languages: javascript-typescript
3228
build-mode: none
29+
config-file: .github/codeql/config.yml
3330
- name: Perform CodeQL Analysis
3431
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe #v3.28.8
3532
with:

0 commit comments

Comments
 (0)