Merge pull request #4374 from Ginger-Automation/codeql-updates

codeql related updates

Author: Maheshkale447

.github/workflows/codeql-analysis.yml

@@ -14,37 +14,9 @@ name: "CodeQL Security Scan"
 
 on:
   push:
-    branches: [ master, Features/Linux-Migration, Releases/*, Releases/*/*, security-scan ]
-    paths-ignore:
-      - '**/bin/**'
-      - '**/obj/**'
-      - '**/Release/**'
-      - '**/Debug/**'
-      - 'Ginger/GingerAutoPilotTest/**'
-      - 'Ginger/GingerConsoleTest/**'
-      - 'Ginger/GingerCoreCommonTest/**'
-      - 'Ginger/GingerCoreNETUnitTest/**'
-      - 'Ginger/GingerCoreTest/**'
-      - 'Ginger/GingerPluginCoreTest/**'
-      - 'Ginger/GingerTest/**'
-      - 'Ginger/GingerUtilsTest/**'
-      - 'Ginger/GingerWPFDriverWindowTest/**'
+    branches: [ master, Features/Linux-Migration, Releases/*, Releases/*/*]
   pull_request:
     branches: [ master ]
-    paths-ignore:
-      - '**/bin/**'
-      - '**/obj/**'
-      - '**/Release/**'
-      - '**/Debug/**'
-      - 'Ginger/GingerAutoPilotTest/**'
-      - 'Ginger/GingerConsoleTest/**'
-      - 'Ginger/GingerCoreCommonTest/**'
-      - 'Ginger/GingerCoreNETUnitTest/**'
-      - 'Ginger/GingerCoreTest/**'
-      - 'Ginger/GingerPluginCoreTest/**'
-      - 'Ginger/GingerTest/**'
-      - 'Ginger/GingerUtilsTest/**'
-      - 'Ginger/GingerWPFDriverWindowTest/**'
   schedule:
     - cron: '0 0 * * 0'
 
@@ -79,6 +51,7 @@ jobs:
       uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
+        config-file: ./.github/workflows/codeql-config.yml
 
 # ------------------------------------------------------------------------------------------------------
 # Install .Net core SDK 8.0.100

.github/workflows/codeql-config.yml

@@ -0,0 +1,33 @@
+name: "CodeQL Config"
+
+paths:
+  - 'Ginger'  # Only scan the Ginger directory for CodeQL
+
+paths-ignore:
+
+  # ignore build outputs
+  - '**/bin/**'
+  - '**/obj/**'
+  - '**/Release/**'
+  - '**/Debug/**'
+  
+  # ignore test projects
+  - 'Ginger/GingerAutoPilotTest/**'
+  - 'Ginger/GingerConsoleTest/**'
+  - 'Ginger/GingerCoreCommonTest/**'
+  - 'Ginger/GingerCoreNETUnitTest/**'
+  - 'Ginger/GingerCoreTest/**'
+  - 'Ginger/GingerPluginCoreTest/**'
+  - 'Ginger/GingerTest/**'
+  - 'Ginger/GingerUtilsTest/**'
+  - 'Ginger/GingerWPFDriverWindowTest/**'
+
+  # more optional files to ignore
+#  - '**/*.Designer.cs'  # Auto-generated designer files
+#  - '**/*.g.cs'         # Auto-generated files
+#  - '**/*.g.i.cs'       # Auto-generated intermediate files
+#  - '**/AssemblyInfo.cs' # Assembly info files
+#  - '**/packages/**'    # NuGet packages
+#  - '**/node_modules'   # JavaScript dependencies
+#  - '**/*.min.js'       # Minified JavaScript
+#  - '**/*.min.css'      # Minified CSS