name: "api-bones CodeQL config"

# Examples are demonstration code — exclude from all queries.
paths-ignore:
  - examples

# These two queries fire only on test fixtures and example demo code in this
# repo. Production crypto (cursor HMAC) uses dynamic key parameters, not
# literals. Inline test suppression (// codeql[...]) is not supported for
# Rust, so we disable the queries project-wide.
query-filters:
  - exclude:
      id: rust/hard-coded-cryptographic-value
  - exclude:
      id: rust/cleartext-logging
