mirror of
https://github.com/github/codeql.git
synced 2026-03-24 00:16:49 +01:00
This adds default exclusion filters for `**/*.min.js` and `**/*-min.js` to the JavaScript auto-builder, meaning that files matching these patterns will no longer be extracted, unless they are re-included in the `.lgtm.yml` file. Alerts in minified code aren't shown by default anyway, so we can save ourselves some work by not analyzing them in the first place. While including minified files in the snapshot can in theory improve analysis results in non-minified files, this is likely to be rare in practice.
1.2 KiB
1.2 KiB
Improvements to JavaScript analysis
NOTES
Please describe your changes in terms that are suitable for customers to read. These notes will have only minor tidying up before they are published as part of the release notes.
This file is written for lgtm users and should contain only notes about changes that affect lgtm enterprise users. Add any other customer-facing changes to the
studio-java.mdfile.
General improvements
- On LGTM, files whose name ends in
.min.jsor-min.jsare no longer extracted by default, since they most likely contain minified code and results in these files would be hidden by default anyway. To extract such files anyway, you can add the following filters to yourlgtm.ymlfile (or add them to existing filters):
extraction:
javascript:
index:
filters:
- include: "**/*.min.js"
- include: "**/*-min.js"
Changes to code extraction
- The TypeScript compiler is now bundled with the distribution, and no longer needs to be installed manually.
Should the compiler version need to be overridden, set the
SEMMLE_TYPESCRIPT_HOMEenvironment variable to point to an installation of thetypescriptNPM package.