Files
vscode/.github/codeql/codeql-config.yml
T
Dmitriy VasyuraandCopilot efc2c86f03 Create custom CodeQL workflow (#334739)
* Create custom CodeQL workflow

* build: Exclude nested esbuild scripts from CodeQL

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* build: Align CodeQL coverage with packaged files

Keep Markdown build/test scripts out of the extension package and restore scanning of the shipped chat-library postinstall script.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* ci: Expand CodeQL release coverage and scope permissions

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-09-06 11:03:23 +00:00

116 lines
4.1 KiB
YAML

# Applied by .github/workflows/codeql.yml.
paths-ignore:
# Development, build, packaging, and CI tooling, not shipped product code.
- '.agents/**'
- '.eslint-plugin-local/**'
- '.github/**'
- '.vscode-test.js'
- '.vscode/**'
- 'build/**'
- 'cli/build.rs'
- 'eslint.config.js'
- 'extensions/**/.esbuild.*'
- 'extensions/*/build/**'
- 'extensions/*/esbuild*.mts'
- 'extensions/*/scripts/**'
- 'extensions/copilot/.eslintplugin/**'
- 'extensions/copilot/.mocha-multi-reporters.js'
- 'extensions/copilot/.mocharc.js'
- 'extensions/copilot/.vscode-test.mjs'
- 'extensions/copilot/.vscode/**'
- 'extensions/copilot/chat-lib/vitest.config.ts'
- 'extensions/copilot/script/**'
- 'extensions/copilot/vite.config.ts'
- 'extensions/esbuild*.mts'
- 'extensions/postinstall.mjs'
- 'extensions/search-result/syntaxes/generateTMLanguage.js'
- 'gulpfile.mjs'
- 'scripts/**'
# Generated build output and dependencies; analyze the product sources instead.
- '**/node_modules/**'
- '**/out/**'
- '.build/**'
- 'cli/target/**'
- 'coverage/**'
- 'extensions/**/dist/**'
- 'out*/**'
# Test directories, fixtures, and helpers.
- 'cli/tests/**'
- 'extensions/*/server/**/test/**'
- 'extensions/*/test-workspace/**'
- 'extensions/*/test/**'
- 'extensions/*/tests/**'
- 'extensions/configuration-editing/src/test/**'
- 'extensions/copilot/src/extension/**/test/**'
- 'extensions/copilot/src/extension/agents/node/adapters/openaiAdapterForSTests.ts'
- 'extensions/copilot/src/extension/typescriptContext/serverPlugin/fixtures/**'
- 'extensions/copilot/src/lib/**/test/**'
- 'extensions/copilot/src/platform/**/test/**'
- 'extensions/copilot/src/platform/commands/common/mockRunCommandExecutionService.ts'
- 'extensions/copilot/src/platform/notebook/common/mockAlternativeContentService.ts'
- 'extensions/copilot/src/platform/tasks/common/testTasksService.ts'
- 'extensions/copilot/src/sanity-test-extension.ts'
- 'extensions/copilot/src/shared-fetch-utils/**/test/**'
- 'extensions/copilot/src/test-extension.ts'
# Standalone chat-lib rewrites runtime VS Code API imports to util/common/test/shims.
# These are required runtime dependencies, not tests; exclude only their test-only siblings.
- 'extensions/copilot/src/util/common/test/annotatedSrc.ts'
- 'extensions/copilot/src/util/common/test/mockChatResponseStream.ts'
- 'extensions/copilot/src/util/common/test/simpleMock.ts'
- 'extensions/copilot/src/util/common/test/testUtils.ts'
- 'extensions/copilot/src/util/node/test/**'
- 'extensions/copilot/src/util/test/**'
- 'extensions/emmet/src/test/**'
- 'extensions/git-base/src/test/**'
- 'extensions/git/src/test/**'
- 'extensions/github-authentication/src/test/**'
- 'extensions/github/src/test/**'
- 'extensions/ipynb/src/test/**'
- 'extensions/markdown-language-features/src/test/**'
- 'extensions/microsoft-authentication/src/**/test/**'
- 'extensions/notebook-renderers/src/test/**'
- 'extensions/npm/src/test/**'
- 'extensions/terminal-suggest/fixtures/**'
- 'extensions/terminal-suggest/src/**/test/**'
- 'extensions/typescript-language-features/src/test-all.ts'
- 'extensions/typescript-language-features/src/test/**'
- 'extensions/vscode-api-tests/**'
- 'extensions/vscode-colorize-perf-tests/**'
- 'extensions/vscode-colorize-tests/**'
- 'extensions/vscode-test-resolver/**'
- 'src/**/test/**'
- 'src/vs/workbench/contrib/terminal/browser/terminalTestHelpers.ts'
- 'test/**'
# Keep exact suffixes: themes.test.contribution.ts ships in the product.
- '**/*.fixture.cjs'
- '**/*.fixture.cts'
- '**/*.fixture.js'
- '**/*.fixture.jsx'
- '**/*.fixture.mjs'
- '**/*.fixture.mts'
- '**/*.fixture.ts'
- '**/*.fixture.tsx'
- '**/*.sanity-test.ts'
- '**/*.sanity-test.tsx'
- '**/*.spec.cjs'
- '**/*.spec.cts'
- '**/*.spec.js'
- '**/*.spec.jsx'
- '**/*.spec.mjs'
- '**/*.spec.mts'
- '**/*.spec.ts'
- '**/*.spec.tsx'
- '**/*.stest.ts'
- '**/*.stest.tsx'
- '**/*.test.cjs'
- '**/*.test.cts'
- '**/*.test.js'
- '**/*.test.jsx'
- '**/*.test.mjs'
- '**/*.test.mts'
- '**/*.test.ts'
- '**/*.test.tsx'