Skip to content

Commit 59ef234

Browse files
committed
Fix CodeQL configuration syntax errors
FIXES: - Fixed invalid array-to-string type mismatch in codeql-config.yml - Simplified queries configuration from complex array to single string - Removed unsupported query-filters syntax that was causing deserialization errors - Kept essential paths-ignore and paths configuration for third-party exclusion CHANGES: - queries: Changed from array format to string format (security-and-quality) - Removed complex query-filters that aren't supported in standard CodeQL config - Maintained all path exclusions for third-party libraries - Simplified configuration to use only supported CodeQL config options This should resolve the 'Cannot deserialize value of type java.lang.String from Array value' error.
1 parent d4c345a commit 59ef234

1 file changed

Lines changed: 4 additions & 48 deletions

File tree

.github/codeql/codeql-config.yml

Lines changed: 4 additions & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -1,45 +1,6 @@
11
name: "CodeQL Configuration"
22

3-
# Disable default queries and enable only security-focused ones
4-
disable-default-queries: false
5-
6-
# Query filters to reduce false positives from third-party libraries
7-
query-filters:
8-
# Exclude third-party library files from certain checks
9-
- exclude:
10-
id: js/unsafe-html-construction
11-
from:
12-
- "static/django_extensions/**"
13-
- "static/drf-yasg/**"
14-
- "static/rest_framework/**"
15-
- "static/vendor/**"
16-
- "static/tinymce/**"
17-
18-
- exclude:
19-
id: js/incomplete-sanitization
20-
from:
21-
- "static/django_extensions/**"
22-
- "static/drf-yasg/**"
23-
- "static/rest_framework/**"
24-
- "static/vendor/**"
25-
26-
- exclude:
27-
id: js/overly-large-range
28-
from:
29-
- "static/django_extensions/**"
30-
- "static/drf-yasg/**"
31-
- "static/rest_framework/**"
32-
- "static/vendor/**"
33-
34-
- exclude:
35-
id: js/incomplete-string-escaping-or-encoding
36-
from:
37-
- "static/django_extensions/**"
38-
- "static/drf-yasg/**"
39-
- "static/rest_framework/**"
40-
- "static/vendor/**"
41-
42-
# Paths to exclude entirely from analysis
3+
# Paths to exclude entirely from analysis (third-party libraries)
434
paths-ignore:
445
- "static/django_extensions/**"
456
- "static/drf-yasg/**"
@@ -51,7 +12,7 @@ paths-ignore:
5112
- "**/*.min.js"
5213
- "**/*.bundle.js"
5314

54-
# Paths to include (our own code)
15+
# Paths to include (focus on our own code)
5516
paths:
5617
- "home/**"
5718
- "core/**"
@@ -60,10 +21,5 @@ paths:
6021
- "static/css/**"
6122
- "custom_static/**"
6223

63-
# Additional queries for enhanced security
64-
queries:
65-
- name: security-extended
66-
uses: security-extended
67-
68-
- name: security-and-quality
69-
uses: security-and-quality
24+
# Use security-focused queries
25+
queries: security-and-quality

0 commit comments

Comments
 (0)