JEngine/.github/codeql/codeql-config.yml at 63b85ffd9d6e3694e761d2408f4af4cc244fbeeb · JasonXuDeveloper/JEngine · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
name: "JEngine CodeQL Configuration"

# Only analyze JEngine source code, exclude third-party dependencies
paths:
  # JEngine Core package
  - 'UnityProject/Packages/com.jasonxudeveloper.jengine.core'
  # JEngine Util package
  - 'UnityProject/Packages/com.jasonxudeveloper.jengine.util'
  # Hot update code
  - 'UnityProject/Assets/HotUpdate/Code'

paths-ignore:
  # Third-party packages
  - 'UnityProject/Packages/com.code-philosophy.hybridclr'
  - 'UnityProject/Packages/com.focus-creative-games.*'
  - 'UnityProject/Packages/com.tuyoogame.*'
  - 'UnityProject/Packages/com.unity.*'
  - 'UnityProject/Packages/com.cysharp.*'
  # Unity generated files
  - 'UnityProject/Library'
  - 'UnityProject/Temp'
  - 'UnityProject/Logs'
  - 'UnityProject/obj'
  # Build outputs
  - 'UnityProject/Builds'
  - 'UnityProject/ServerData'
  # Test files (optional - remove if you want tests scanned)
  - 'UnityProject/Assets/Tests'
  # Third-party assets
  - 'UnityProject/Assets/Plugins'
  # Samples
  - 'UnityProject/Assets/Samples'

# Query configuration
queries:
  - uses: security-and-quality

# Exclude rules that are intentional design decisions for this project
query-filters:
  # Generic catch clauses are intentional for crash prevention in game framework
  - exclude:
      id: cs/catch-of-all-exceptions
  # Nested if-statements are acceptable code style
  - exclude:
      id: cs/nested-if-statements
  # Complex blocks are acceptable for algorithm implementations
  - exclude:
      id: cs/complex-block
  # Project intentionally avoids LINQ for performance
  - exclude:
      id: cs/linq/missed-where