mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 18:48:36 +00:00
23 lines
785 B
YAML
23 lines
785 B
YAML
name: "LiteLLM CodeQL config"
|
|
|
|
# Use security-extended suite instead of security-and-quality to avoid
|
|
# result sets > 2 GiB on this codebase that cause fatal OOM failures.
|
|
queries:
|
|
- uses: security-extended
|
|
|
|
# These two queries are security queries included in security-extended that
|
|
# individually produce result sets > 2 GiB on this codebase, causing fatal
|
|
# OOM failures. Exclude them as a safety net until CI confirms they no longer
|
|
# OOM; drop these exclusions in a follow-up once verified.
|
|
query-filters:
|
|
- exclude:
|
|
id: py/clear-text-logging-sensitive-data # CWE-312 — > 2 GiB result set
|
|
- exclude:
|
|
id: py/polynomial-redos # CWE-730 — > 2 GiB result set
|
|
|
|
paths-ignore:
|
|
- tests
|
|
- docs
|
|
- "**/*.md"
|
|
- litellm/proxy/_experimental/out
|