Create CodeQL.yml to declare exclusions

brflood · brflood · commit 2edf9939d871 · 2025-12-01T13:40:35.000-08:00
diff --git a/CodeQL.yml b/CodeQL.yml
@@ -0,0 +1,6 @@
+# https://eng.ms/docs/coreai/devdiv/one-engineering-system-1es/1es-docs/codeql/github-codeql
+path_classifiers:
+  library:
+    # Exclude external Playwright files from scan to avoid false positives as these files include non-security uses of SHA1 for non-cryptosecure guids
+    - "**/.playwright/package/lib/vite/traceViewer/assets/defaultSettingsView-DkkRvn5X.js"
+    - "**/.playwright/package/lib/utilsBundleImpl/index.js"
