From e2b446d3490fd58abe53c1e3d5430629b5162dde Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Danil=20Shaymurzin=20=E2=9A=A1=EF=B8=8F?= <via@mrzn.org>
Date: Thu, 30 Mar 2023 00:53:47 +0500
Subject: [PATCH] feat(server): add codeql security and quality queries and fix
 config (#1307)

* ci: fix query-filters

* ci: fix codeql workflow

* ci(codeql): security and quality queries
---
 .github/codeql/config.yml                           |  5 +++++
 .github/workflows/codeql_vulnerability_analysis.yml | 10 +++-------
 2 files changed, 8 insertions(+), 7 deletions(-)
 create mode 100644 .github/codeql/config.yml

diff --git a/.github/codeql/config.yml b/.github/codeql/config.yml
new file mode 100644
index 00000000..ab510459
--- /dev/null
+++ b/.github/codeql/config.yml
@@ -0,0 +1,5 @@
+query-filters:
+  - exclude:
+      id: js/disabling-certificate-validation
+  - exclude:
+      id: js/missing-rate-limiting
diff --git a/.github/workflows/codeql_vulnerability_analysis.yml b/.github/workflows/codeql_vulnerability_analysis.yml
index 6c4a50ed..637e9683 100644
--- a/.github/workflows/codeql_vulnerability_analysis.yml
+++ b/.github/workflows/codeql_vulnerability_analysis.yml
@@ -1,4 +1,4 @@
-name: "CodeQL"
+name: "CodeQL analysis"
 
 on:
   pull_request:
@@ -22,12 +22,6 @@ jobs:
       contents: read
       security-events: write
 
-    query-filters:
-      - exclude:
-          id: js/disabling-certificate-validation
-      - exclude:
-          id: js/missing-rate-limiting
-
     strategy:
       fail-fast: false
     steps:
@@ -38,6 +32,8 @@ jobs:
       uses: github/codeql-action/init@v2
       with:
         languages: javascript
+        queries: +security-and-quality
+        config-file: ./.github/codeql/config.yml
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2