mu_crypto_release/CodeQlFilters.yml at main · microsoft/mu_crypto_release · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
## @file
# CodeQL Result Filters for Packages in mu_crypto_release
#
# Note: Paths begin with `**/` so filters apply regardless of where packages
# are located in the directory hierarchy.
#
# Copyright (c) Microsoft Corporation
# SPDX-License-Identifier: BSD-2-Clause-Patent
##

{
  "Filters": [
    # =========================================================================
    # MbedTlsPkg - Upstream mbedtls library findings (submodule code)
    # =========================================================================
    "-**/MbedTlsPkg/Library/MbedTlsLib/mbedtls/**:**",
    # mbedtls configuration header (mirrors upstream, not project-controlled)
    "-**/MbedTlsPkg/Library/MbedTlsLib/Include/mbedtls/mbedtls_config.h:**",

    # =========================================================================
    # OpensslPkg - Upstream OpenSSL library findings (submodule code)
    # =========================================================================
    "-**/OpensslPkg/Library/OpensslLib/openssl/**:**",
    "-**/OpensslPkg/Library/OpensslLib/OpensslGen/**:**",
    # Generated build info header
    "-**/OpensslPkg/Library/OpensslLib/buildinf.h:**",

    # =========================================================================
    # Repo - False positives
    # =========================================================================
    "-**/OpensslPkg/Library/TlsLib/TlsConfig.c:cpp/unused-static-variable",

    # =========================================================================
    # MU_BASECORE - Dependency findings (pulled via GetDependencies)
    # =========================================================================
    "-**/MU_BASECORE/**:**",

    # =========================================================================
    # Features/MM_SUPV - Dependency findings (pulled via GetDependencies)
    # =========================================================================
    "-**/MmSupervisorPkg/**:**",


  ]
}