name: Eden Encore CodeQL — first-party sources
# Consumed by .github/workflows/codeql-advanced.yml (config-file).
# Do not assume org-only custom repository properties on personal repos.
# Preserve scanning of our code and active renderer forks.
# Only exclude unused tool/test scripts inside byte-locked third-party snapshots.
# R428: build-mode:none C/C++ extraction previously indexed 40k source files
# across ~138k vendored tree entries and repeatedly lost its runner mid-scan.
# Analyze Encore-owned code, native platform glue and ACTIVE renderer forks.
# Immutable vendor/sources and vendor/objects are locked references, not built
# source; scan their active generated adaptations and our wrappers instead.
# Directory filtering is supported by CodeQL for C/C++ build-mode:none.
paths:
  - .github
  - headless
  - src
  - tools
  - third_party
  - fixtures
  - vendor/encore-active
paths-ignore:
  - 'vendor/sources/**/libs/mpl/preprocessed/pp.py'   # Boost MPL formatter
  - 'vendor/sources/**/tools/litre/cplusplus.py'      # Boost Litre harness
  - 'vendor/sources/**/bin/nir-test-runner.py'        # Mesa offline test runner
  - 'vendor/sources/**/hb_test_tools.py'              # HarfBuzz shaping test helper
  - 'vendor/sources/**/python/run_tests.py'          # Third-party Python test runner