mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 12:48:57 +00:00
Joe Reyna
cbbd51a5ce
* fix(codeql): switch to security-extended query suite The security-and-quality suite produces result sets > 2 GiB on this codebase, causing fatal OOM failures and blocking CI. Switching to security-extended reduces query scope to security-only checks, which still complete successfully. Quality/maintainability checks are already covered by the existing lint pipeline. * fix(codeql): exclude OOM queries from security-extended
23 lines
785 B
YAML
23 lines
785 B
YAML
name: "LiteLLM CodeQL config"
|
|
|
|
# Use security-extended suite instead of security-and-quality to avoid
|
|
# result sets > 2 GiB on this codebase that cause fatal OOM failures.
|
|
queries:
|
|
- uses: security-extended
|
|
|
|
# These two queries are security queries included in security-extended that
|
|
# individually produce result sets > 2 GiB on this codebase, causing fatal
|
|
# OOM failures. Exclude them as a safety net until CI confirms they no longer
|
|
# OOM; drop these exclusions in a follow-up once verified.
|
|
query-filters:
|
|
- exclude:
|
|
id: py/clear-text-logging-sensitive-data # CWE-312 — > 2 GiB result set
|
|
- exclude:
|
|
id: py/polynomial-redos # CWE-730 — > 2 GiB result set
|
|
|
|
paths-ignore:
|
|
- tests
|
|
- docs
|
|
- "**/*.md"
|
|
- litellm/proxy/_experimental/out
|