Julio Quinteros Pro 53f3123030 fix(ci): add custom CodeQL workflow to replace expensive default setup ...

The default CodeQL setup runs all 45 Python security queries against the
entire codebase. Two queries (CleartextLogging, PolynomialReDoS) produce
result sets > 2 GiB, causing 49+ minute runs that fail and block CI.

- Add custom workflow with 30-minute timeout and concurrency limits
- Exclude py/clear-text-logging-sensitive-data (CWE-312)
- Exclude py/polynomial-redos (CWE-730)
- Skip scanning tests/, docs/, and UI build output

NOTE: The Default Setup must be disabled in repo Settings > Code security
before merging, otherwise both will run simultaneously.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-28 11:40:22 -03:00

..

codeql-config.yml

fix(ci): add custom CodeQL workflow to replace expensive default setup

2026-02-28 11:40:22 -03:00