mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-15 07:06:15 +00:00
Tobias GesellchenandClaude Sonnet 4.6
12a422b45a
The config failed with: MismatchedInputException "Cannot deserialize value of type java.lang.String from Array value" Root causes removed: - 'uses' in a queries entry must be a string, not an array. The 'go-security-extra' block used uses: [list] which is invalid. All the listed queries are already covered by security-extended and security-and-quality, so the block is simply removed. - 'reason' is not a valid key under query-filters entries. Removed from both exclude blocks (one entry had no other valid keys so the whole exclude was dropped too). - 'query-config' is not a CodeQL config section at all. Removed. - 'packs' duplicated codeql/go-queries with an invalid semver range (@~0.0.0). Removed the section entirely; the queries package is already loaded transitively by the suites above. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
743 B
YAML
30 lines
743 B
YAML
# CodeQL configuration
|
|
# https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning
|
|
|
|
name: "Go Security Analysis"
|
|
|
|
disable-default-queries: false
|
|
|
|
queries:
|
|
- uses: security-extended
|
|
- uses: security-and-quality
|
|
|
|
# Paths to include
|
|
paths:
|
|
- "cmd/**/*.go"
|
|
- "pkg/**/*.go"
|
|
- "*.go"
|
|
|
|
# Paths to exclude from analysis
|
|
paths-ignore:
|
|
- "**/*.pb.go" # Generated protobuf files
|
|
- "**/*_gen.go" # Generated code
|
|
- "**/vendor/**" # Vendor dependencies
|
|
- "**/build/**" # Build artifacts
|
|
- "**/scripts/**" # Build scripts
|
|
- "**/*_test.go" # Test files
|
|
|
|
query-filters:
|
|
- exclude:
|
|
id: go/hardcoded-credentials
|