mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 14:48:44 +00:00
Julio Quinteros Pro
53f3123030
The default CodeQL setup runs all 45 Python security queries against the entire codebase. Two queries (CleartextLogging, PolynomialReDoS) produce result sets > 2 GiB, causing 49+ minute runs that fail and block CI. - Add custom workflow with 30-minute timeout and concurrency limits - Exclude py/clear-text-logging-sensitive-data (CWE-312) - Exclude py/polynomial-redos (CWE-730) - Skip scanning tests/, docs/, and UI build output NOTE: The Default Setup must be disabled in repo Settings > Code security before merging, otherwise both will run simultaneously. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
16 lines
486 B
YAML
16 lines
486 B
YAML
name: "LiteLLM CodeQL config"
|
|
|
|
# Exclude queries that produce result sets > 2 GiB on this codebase,
|
|
# causing 49+ minute runs that fail and block CI resources.
|
|
query-filters:
|
|
- exclude:
|
|
id: py/clear-text-logging-sensitive-data # CWE-312/CleartextLogging.ql — result set > 2 GiB
|
|
- exclude:
|
|
id: py/polynomial-redos # CWE-730/PolynomialReDoS.ql — result set > 2 GiB
|
|
|
|
paths-ignore:
|
|
- tests
|
|
- docs
|
|
- "**/*.md"
|
|
- litellm/proxy/_experimental/out
|