litellm/.github/codeql
Cursor Agent dbdc7ea7f0
ci(codeql): exclude py/log-injection from Python analysis
The Security/CWE-117/LogInjection.ql query has been consistently failing
with 'Result set is larger than the limit of 2GiB' on every scheduled and
push run for the last several days, breaking CodeQL / Analyze (python) on
main and litellm_internal_staging.

This is the same known CodeQL scaling limitation already documented for
py/clear-text-logging-sensitive-data (CWE-312) and py/polynomial-redos
(CWE-730): taint-flow queries produce combinatorial path explosion on
codebases with pervasive logging like LiteLLM. Extend the existing
exclusion pattern to cover py/log-injection.

Co-authored-by: Krrish Dholakia <krrish-berri-2@users.noreply.github.com>
2026-07-11 07:06:25 +00:00
..
codeql-config.yml ci(codeql): exclude py/log-injection from Python analysis 2026-07-11 07:06:25 +00:00