Daniel Volz
273d84e26c
- Add custom codeql.yml workflow - Configure to use codeql-config.yml - Exclude js/missing-rate-limiting rule (false positive) Rate limiting is implemented via @fastify/rate-limit plugin
18 lines
485 B
YAML
18 lines
485 B
YAML
name: "MedAssist CodeQL Config"
|
|
|
|
# Paths to ignore in CodeQL analysis
|
|
paths-ignore:
|
|
- "**/node_modules/**"
|
|
- "**/dist/**"
|
|
- "**/*.test.ts"
|
|
- "**/test/**"
|
|
|
|
# Query filters to suppress false positives
|
|
query-filters:
|
|
# Rate limiting IS implemented via @fastify/rate-limit plugin (registered in index.ts)
|
|
# Route-specific limits are applied via config.rateLimit option
|
|
# CodeQL doesn't recognize this Fastify-specific pattern
|
|
- exclude:
|
|
id: js/missing-rate-limiting
|
|
|