jas88 / RDMP / 18623712769

57%

main: 36%

push

github

Add CodeQL analysis to bundle build workflow (#20)

## Summary
- Integrate CodeQL security analysis into the bundle build CI job
- Configure CodeQL to exclude generated files (*.g.cs, *.g.i.cs, etc.)
from analysis
- Run CodeQL analysis before source bundling to catch security issues
early
- Upload SARIF results only if issues are found to reduce noise

## Test plan
- [ ] Verify CI bundle build runs successfully with CodeQL analysis
- [ ] Confirm generated files are properly excluded from CodeQL results
- [ ] Check that SARIF results are uploaded when issues are detected
- [ ] Validate that build time impact is minimal

## Changes
- Updated `.github/configs/codeql.yml` to exclude generated code files
- Modified `.github/workflows/build.yml` to add CodeQL analysis steps in
bundle job

11402 of 21457 branches covered (53.14%)

Branch coverage included in aggregate %.

32367 of 55267 relevant lines covered (58.56%)

8746.09 hits per line