docs+security: sync controls and scope Warden RC4 CodeQL exception

This commit is contained in:
Kelsi 2026-02-19 15:54:35 -08:00
parent 00086c2ad9
commit 586fb88c5f
7 changed files with 68 additions and 62 deletions

7
.github/codeql/codeql-config.yml vendored Normal file
View file

@ -0,0 +1,7 @@
name: wowee-codeql-config
# Warden stream crypto must remain RC4 for protocol compatibility.
# Keep weak-crypto detection enabled project-wide, but exclude this one file
# so CodeQL doesn't raise an unfixable compatibility alert.
paths-ignore:
- src/game/warden_crypto.cpp

View file

@ -48,6 +48,7 @@ jobs:
uses: github/codeql-action/init@v3
with:
languages: cpp
config-file: ./.github/codeql/codeql-config.yml
- name: Build
run: |