Daniel Volz
6b54ecef4f
Rate limiting IS implemented via @fastify/rate-limit plugin: - Global: 100 req/min (index.ts) - Auth routes: 5-10 req/min via config.rateLimit option CodeQL doesn't recognize Fastify's plugin-based rate limiting pattern.
17 lines
554 B
YAML
17 lines
554 B
YAML
name: "MedAssist CodeQL Config"
|
|
|
|
# Paths to ignore in CodeQL analysis
|
|
paths-ignore:
|
|
- "**/node_modules/**"
|
|
- "**/dist/**"
|
|
- "**/*.test.ts"
|
|
|
|
# Query filters to suppress false positives
|
|
# The rate limiting alerts are false positives because we use @fastify/rate-limit plugin
|
|
# which CodeQL doesn't recognize. The plugin is registered globally in index.ts
|
|
# and route-specific limits are applied via config.rateLimit option.
|
|
query-filters:
|
|
- exclude:
|
|
id: js/missing-rate-limiting
|
|
# We use @fastify/rate-limit which CodeQL doesn't detect
|