summaryrefslogtreecommitdiffstats
path: root/.codeql-config.yml
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-17 08:35:42 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-17 08:35:42 +0000
commit8909d83a3ed226e4a7c962261217cb2c14ff2ec9 (patch)
tree6244f99976b171d94833db21dc498c3a89d04fe4 /.codeql-config.yml
parentReleasing progress-linux version 2:2.6.1-6~progress7.99u1. (diff)
downloadcryptsetup-8909d83a3ed226e4a7c962261217cb2c14ff2ec9.tar.xz
cryptsetup-8909d83a3ed226e4a7c962261217cb2c14ff2ec9.zip
Merging upstream version 2:2.7.0.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '.codeql-config.yml')
-rw-r--r--.codeql-config.yml31
1 files changed, 31 insertions, 0 deletions
diff --git a/.codeql-config.yml b/.codeql-config.yml
new file mode 100644
index 0000000..1311657
--- /dev/null
+++ b/.codeql-config.yml
@@ -0,0 +1,31 @@
+name: "Cryptsetup CodeQL config"
+
+query-filters:
+- exclude:
+ id: cpp/fixme-comment
+- exclude:
+ id: cpp/empty-block
+- exclude:
+ id: cpp/poorly-documented-function
+- exclude:
+ id: cpp/loop-variable-changed
+- exclude:
+ id: cpp/empty-if
+- exclude:
+ id: cpp/long-switch
+- exclude:
+ id: cpp/complex-condition
+- exclude:
+ id: cpp/commented-out-code
+
+# These produce many false positives
+- exclude:
+ id: cpp/uninitialized-local
+- exclude:
+ id: cpp/path-injection
+- exclude:
+ id: cpp/missing-check-scanf
+
+# CodeQL should understand coverity [toctou] comments
+- exclude:
+ id: cpp/toctou-race-condition