Add config section to CodeQL workflow with query filters and paths-ignore

[Copilot]

Overview

This PR modifies the .github/workflows/codeql-analysis.yml file to add a config: section to the github/codeql-action/init@v3 action, enabling more granular control over CodeQL analysis.

Changes

Added Query Filters

The configuration now excludes specific queries that may generate noise in the analysis:

• java/missing-call-to-super-finalize - Excludes finalize-related checks
• java/unread-local-variable - Excludes unused variable warnings

Added Paths-Ignore

Test code is now excluded from CodeQL analysis to focus on production code:

• **/test/** - Excludes test directories
• **/tests/** - Excludes tests directories
• **/*Test.java - Excludes test files following Maven naming convention (e.g., VulnerableApplicationTest.java)
• **/*Tests.java - Excludes test files with plural naming

Configuration Format

The configuration is provided inline using the config: | parameter with YAML syntax:

config: |
  query-filters:
    - exclude:
        id: java/missing-call-to-super-finalize
    - exclude:
        id: java/unread-local-variable
  paths-ignore:
    - '**/test/**'
    - '**/tests/**'
    - '**/*Test.java'
    - '**/*Tests.java'

Benefits

• Reduces noise from non-critical query results
• Focuses analysis on production code rather than test code
• Maintains the existing security-and-quality query suite while fine-tuning results
• Uses standard Maven test file naming conventions for accurate path exclusion

Validation

• ✅ YAML syntax validated
• ✅ Test file patterns verified against actual repository structure
• ✅ Compatible with CodeQL action v3

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Modify the code scanning workflow file</issue_title>
<issue_description>Modify the .github/workflows/codeql-analysis.yml file.

add a config: section to the codeql-action/init action.

In that config section, add a couple of exclude query filters, as well as some paths-ignore</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes #8

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.