chore: add code ql configuration

bmunguli commented 1 week ago

Description

Add custom configuration file for codeql

Exclude tests from scanning to optimize pipeline runs
Exclude warning and recommandations to have focused reports
Exclude: java/spring-disabled-csrf-protection check as this application is backend and disabling csrf is intended. This API is exclusively used by non-browser clients.

Pre-review checks

Please ensure to do as many of the following checks as possible, before asking for committer review:

[X] DEPENDENCIES are up-to-date. Dash license tool. Committers can open IP issues for restricted libs.
[X] Copyright and license header are present on all affected files

bmunguli commented 4 days ago

Hello @tunacicek can you help with a review on this PR if it looks ok and is valuable for this project? Need to run the code ql workflow to fully test this one.

tunacicek commented 4 days ago

@agg3fe : Is that ok for you too?

agg3fe commented 4 days ago

@agg3fe : Is that ok for you too?

Yes it's fine from my side.

eclipse-tractusx / sldt-semantic-hub

chore: add code ql configuration #279

Description

Pre-review checks