Files
crewAI/.github/codeql/codeql-config.yml
Cursor Agent bcb2412b9b Include all lib packages in CodeQL analysis paths
lib/cli and lib/crewai-core were missing from the CodeQL config paths.
Also update the templates ignore path to the relocated CLI package.

Co-authored-by: Rip&Tear <theCyberTech@users.noreply.github.com>
2026-08-05 05:45:00 +00:00

38 lines
1.2 KiB
YAML

name: "CodeQL Config"
paths-ignore:
# Ignore template files - these are boilerplate code that shouldn't be analyzed
- "lib/cli/src/crewai_cli/templates/**"
# Ignore test cassettes - these are test fixtures/recordings
- "lib/crewai/tests/cassettes/**"
- "lib/crewai-tools/tests/cassettes/**"
# Ignore cache and build artifacts
- ".cache/**"
# Ignore documentation build artifacts
- "docs/.cache/**"
# Ignore experimental code
- "lib/crewai/src/crewai/experimental/a2a/**"
paths:
# Include GitHub Actions workflows/composite actions for CodeQL actions analysis
- ".github/workflows/**"
- ".github/actions/**"
# Include all Python source code from workspace packages
- "lib/cli/src/**"
- "lib/crewai/src/**"
- "lib/crewai-core/src/**"
- "lib/crewai-tools/src/**"
- "lib/crewai-files/src/**"
- "lib/devtools/src/**"
# Include tests (but exclude cassettes via paths-ignore)
- "lib/cli/tests/**"
- "lib/crewai/tests/**"
- "lib/crewai-core/tests/**"
- "lib/crewai-tools/tests/**"
- "lib/crewai-files/tests/**"
- "lib/devtools/tests/**"
# Configure specific queries or packs if needed
# queries:
# - uses: security-and-quality