Skip to content

fix: 排除逆向分析生成代码 - #1

Merged
Matrtex merged 1 commit into
mainfrom
fix/codeql-generated-paths-20260811
Aug 11, 2026
Merged

fix: 排除逆向分析生成代码#1
Matrtex merged 1 commit into
mainfrom
fix/codeql-generated-paths-20260811

Conversation

@Matrtex

@Matrtex Matrtex commented Aug 11, 2026

Copy link
Copy Markdown
Owner

变更

  • 将 CodeQL 从 default setup 切换为 advanced setup
  • 排除逆向工程自动生成的 chunks、合并分析产物、第三方原始 bundle
  • 保留对分析脚本、Open-Claude-Code 重建源码/测试及未来新增源码的扫描
  • 使用最小 GITHUB_TOKEN 权限、CodeQL v4、每周定时扫描

依据

当前 67 条告警全部位于自动切分/合并的研究语料中,这些文件仅被脚本按文本读取,不会被 import、执行或发布。配置排除 111 个第三方/派生文件,仍扫描 15 个实际维护文件。

验证

  • 67/67 告警路径均命中排除规则
  • 实际维护文件仍在扫描范围
  • workflow/config YAML、权限和路径断言均通过
  • PR 中由 advanced CodeQL 做最终验证

Copilot AI lite review requested due to automatic review settings August 11, 2026 13:03

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@Matrtex
Matrtex merged commit c1572a7 into main Aug 11, 2026
2 checks passed
@Matrtex
Matrtex deleted the fix/codeql-generated-paths-20260811 branch August 11, 2026 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants