codeql-config.yml 1.1 KB

1234567891011121314151617181920212223242526272829
  1. ## @file
  2. # CodeQL configuration file for edk2.
  3. #
  4. # Copyright (c) Microsoft Corporation.
  5. # SPDX-License-Identifier: BSD-2-Clause-Patent
  6. ##
  7. name: "CodeQL config"
  8. # The following line disables the default queries. This is used because we want to enable on query at a time by
  9. # explicitly specifying each query in a "queries" array as they are enabled.
  10. #
  11. # See the following for more information about adding custom queries:
  12. # https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-a-custom-configuration-file
  13. #disable-default-queries: true
  14. queries:
  15. - name: EDK2 CodeQL Query List
  16. uses: ./.github/codeql/edk2.qls
  17. # We must specify a query for CodeQL to run. Until the first query is enabled, enable the security query suite but
  18. # exclude all problem levels from impacting the results. After the first query is enabled, this filter can be relaxed
  19. # to find the level of problems desired from the query.
  20. query-filters:
  21. - exclude:
  22. problem.severity:
  23. - warning
  24. - recommendation