Files

29 lines
1.4 KiB
YAML

name: Eden Encore CodeQL — first-party sources
# Consumed by .github/workflows/codeql-advanced.yml (config-file).
# Do not assume org-only custom repository properties on personal repos.
# Preserve scanning of our code and active renderer forks.
# Only exclude unused tool/test scripts inside byte-locked third-party snapshots.
# R428: build-mode:none C/C++ extraction previously indexed 40k source files
# across ~138k vendored tree entries and repeatedly lost its runner mid-scan.
# Analyze Encore-owned code, native platform glue and ACTIVE renderer forks.
# Immutable vendor/sources and vendor/objects are locked references, not built
# source; scan their active generated adaptations and our wrappers instead.
# Directory filtering is supported by CodeQL for C/C++ build-mode:none.
paths:
- .github
- headless
- src
- tools
- third_party
- fixtures
- vendor/encore-active
paths-ignore:
# Immutable upstream source snapshots used as regression fixtures only.
# The active graphics runtime remains under vendor/encore-active.
- 'tools/fixtures/**'
- 'vendor/sources/**/libs/mpl/preprocessed/pp.py' # Boost MPL formatter
- 'vendor/sources/**/tools/litre/cplusplus.py' # Boost Litre harness
- 'vendor/sources/**/bin/nir-test-runner.py' # Mesa offline test runner
- 'vendor/sources/**/hb_test_tools.py' # HarfBuzz shaping test helper
- 'vendor/sources/**/python/run_tests.py' # Third-party Python test runner