From 270ce9d8ca6e58ceb205baa9e05df44a65610890 Mon Sep 17 00:00:00 2001
From: Yuneng Jiang <yuneng@berri.ai>
Date: Mon, 14 Sep 2026 16:01:12 -0700
Subject: [PATCH] ci(codeql): exclude remaining audited Python query categories

---
 .github/codeql/codeql-config.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
index b1162a38a38..1c3da4839a0 100644
--- a/.github/codeql/codeql-config.yml
+++ b/.github/codeql/codeql-config.yml
@@ -20,6 +20,14 @@ query-filters:
       id: py/cyclic-import
   - exclude:
       id: py/unsafe-cyclic-import
+  # Disable repeated logging findings, including genuine log-injection findings.
+  - exclude:
+      id: py/log-injection
+  # Known false positives on live settings and Protocol placeholders.
+  - exclude:
+      id: py/unused-global-variable
+  - exclude:
+      id: py/ineffectual-statement
 
 paths-ignore:
   - tests