From 7f3455272e20f5621851d32bcf8135aa25255f5c Mon Sep 17 00:00:00 2001
From: jibanez-staticduo <staticduo@gmail.com>
Date: Fri, 18 Sep 2026 14:13:11 +0200
Subject: [PATCH] ci: avoid CodeQL log injection query overflow

---
 .github/codeql/codeql-config.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
index 6e15c1069a3..480ba4b3d7e 100644
--- a/.github/codeql/codeql-config.yml
+++ b/.github/codeql/codeql-config.yml
@@ -12,6 +12,11 @@ queries:
 query-filters:
   - exclude:
       id: py/clear-text-logging-sensitive-data  # CWE-312
+  # CodeQL 2.27.0 exceeds its 2 GiB result-set limit while evaluating the
+  # repository-wide log-injection data-flow query. Keep the remaining Python
+  # security-and-quality queries enabled until the upstream query scales.
+  - exclude:
+      id: py/log-injection                       # CWE-117
   - exclude:
       id: py/polynomial-redos                   # CWE-730
   # Import resolution confuses stdlib types with management_endpoints/types.py.