Improve CodeQL action

* no need to run CodeQL on Dependabit PRs; no related files are changed there
* specify permissions
* enable `security-and-quality` rules instead of the default rules
* ignore `vendor` folders

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
This commit is contained in:
XhmikosR
2025-03-07 08:39:05 +02:00
parent 5519b9d98c
commit 16dff4fdd1
2 changed files with 21 additions and 7 deletions

3
.github/codeql/codeql-config.yml vendored Normal file
View File

@@ -0,0 +1,3 @@
name: "CodeQL config"
paths-ignore:
- "**/vendor/**"