From 668d3ac9c940ad2813dd5c33275b6eea1c3b04bb Mon Sep 17 00:00:00 2001
From: sickn33 <sickn33@users.noreply.github.com>
Date: Thu, 9 Apr 2026 13:56:15 +0200
Subject: [PATCH] ci(codeql): Reduce duplicate scan noise

Remove the Java/Kotlin scan from CodeQL because this repository does not
contain a buildable Java project. Load a dedicated CodeQL config that
excludes generated plugin mirrors so duplicate template classes do not
reduce scan coverage or signal quality.
---
 .github/codeql/codeql-config.yml | 6 ++++++
 .github/workflows/codeql.yml     | 3 +--
 2 files changed, 7 insertions(+), 2 deletions(-)
 create mode 100644 .github/codeql/codeql-config.yml

diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
new file mode 100644
index 00000000..e9a2847a
--- /dev/null
+++ b/.github/codeql/codeql-config.yml
@@ -0,0 +1,6 @@
+name: "CodeQL Config"
+
+paths-ignore:
+  # Generated plugin mirrors create duplicate scan noise without adding
+  # source coverage because the canonical sources live outside plugins/.
+  - "plugins/**"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fd8b2148..9a3186b7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,8 +30,6 @@ jobs:
             build-mode: none
           - language: go
             build-mode: autobuild
-          - language: java-kotlin
-            build-mode: none
           - language: javascript-typescript
             build-mode: none
           - language: python
@@ -46,6 +44,7 @@ jobs:
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
+          config-file: ./.github/codeql/codeql-config.yml
 
       - name: Autobuild
         if: matrix.build-mode == 'autobuild'