CodeQL-Community-Packs
CodeQL-Community-Packs copied to clipboard
CodeQL Synthetic Config - Add additional 3rd party paths to ignore
This is currently the best reference that aggregates this list of installed/vendored dependency folders that cause CodeQL to report vulns in 3rd party code.
Ex: https://github.com/nodejs/node/tree/main/deps
Ref:
- https://ghsecuritylab.slack.com/archives/CQJN6KQHX/p1718740573865399