Skip to content

Suppress serialization rules from analysis repo-wide#11488

Open
GrabYourPitchforks wants to merge 1 commit intomainfrom
levib/codeql-serialization
Open

Suppress serialization rules from analysis repo-wide#11488
GrabYourPitchforks wants to merge 1 commit intomainfrom
levib/codeql-serialization

Conversation

@GrabYourPitchforks
Copy link
Member

@GrabYourPitchforks GrabYourPitchforks commented Feb 28, 2026

This is a port of dotnet/winforms#14240 and dotnet/winforms#14300 into the current repo to mass-suppress rules which aren't applicable to our code base.

This should silence 11 alerts from our work item database.

Microsoft Reviewers: Open in CodeFlow

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a repository-level CodeQL configuration to suppress specific C# deserialization-related queries that are not applicable to this codebase, reducing noise in CodeQL/TSA alerting.

Changes:

  • Introduces a root .CodeQL.yml configuration file for CodeQL runs / TSA autofiling.
  • Repo-wide excludes three C# CodeQL query IDs related to serialization / unexpected subtype deserialization.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@dotnet-policy-service dotnet-policy-service bot added the PR metadata: Label to tag PRs, to facilitate with triage label Feb 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR metadata: Label to tag PRs, to facilitate with triage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants