name: "CodeQL Config" paths-ignore: # Generated plugin mirrors create duplicate scan noise without adding # source coverage because the canonical sources live outside plugins/. - "plugins/**"