Skip to content

Configure CodeQL for Rust - #4101

Closed
decofe wants to merge 1 commit into
mainfrom
agent-1779292018-2223-16990
Closed

decofe wants to merge 1 commit into
mainfrom
agent-1779292018-2223-16990

Conversation

@decofe

@decofe decofe commented May 20, 2026

Copy link
Copy Markdown
Member

Summary

  • add a repo-local CodeQL advanced setup workflow for Rust
  • add CodeQL config that excludes the noisy rust/hard-coded-cryptographic-value query

Context

CodeQL is flagging hard-coded Ethereum transaction nonces in Rust tests as cryptographic nonce material. This keeps CodeQL coverage enabled while removing that false-positive class.

Validation

  • Parsed .github/workflows/codeql.yml and .github/codeql/codeql-config.yml with PyYAML

@joshieDo
joshieDo marked this pull request as draft May 20, 2026 15:48
@decofe
decofe force-pushed the agent-1779292018-2223-16990 branch from 27ff9eb to ce9b8d2 Compare May 20, 2026 15:48
@decofe

decofe commented May 20, 2026

Copy link
Copy Markdown
Member Author

Closing: this disabled rust/hard-coded-cryptographic-value globally. We only want to suppress the test-only false positive, so this should be handled by dismissing the specific CodeQL alert as used in tests.

@decofe decofe closed this May 20, 2026
@DaniPopes
DaniPopes deleted the agent-1779292018-2223-16990 branch September 10, 2026 23:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant