diff --git a/.github/config/codeql-config.yml b/.github/config/codeql-config.yml new file mode 100644 index 0000000000..dd94726dba --- /dev/null +++ b/.github/config/codeql-config.yml @@ -0,0 +1,4 @@ +name: "CodeQL config" + +paths: + - src diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c30bd4b44f..9138fc4a20 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,7 +2,7 @@ name: "Code scanning - action" on: push: - branches: ['*/dev','*/contrib', '*/feature/**'] + branches: ['*/dev','*/contrib'] pull_request: # The branches below must be a subset of the branches above branches: ['*/dev','*/contrib'] @@ -26,3 +26,5 @@ jobs: - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v1 + with: + config-file: ./.github/config/codeql-config.yml \ No newline at end of file