From 9e72ca18672419367d7ebf4a9b7f1772cdaf24f5 Mon Sep 17 00:00:00 2001
From: Rohitesh Gupta <1429138+srkgupta@users.noreply.github.com>
Date: Tue, 18 Oct 2022 12:44:19 +0530
Subject: [PATCH] Updated CodeQL to use latest version (#21436)

* Update CodeQL to latest version
---
 .github/codeql/codeql-config.yml      | 14 ++++++++++++++
 .github/workflows/codeql-analysis.yml | 21 ++++++++++++++-------
 2 files changed, 28 insertions(+), 7 deletions(-)
 create mode 100644 .github/codeql/codeql-config.yml

diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
new file mode 100644
index 0000000000..3c24100d19
--- /dev/null
+++ b/.github/codeql/codeql-config.yml
@@ -0,0 +1,14 @@
+name: "CodeQL config"
+
+query-filters:
+  - exclude:
+      problem.severity:
+        - warning
+        - recommendation
+  - exclude:
+      id: go/log-injection
+
+paths-ignore:
+  - templates
+  - tests
+  - 'api4/*_local.go'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 20c839211d..791a45ee95 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -6,7 +6,7 @@ on:
     branches: [ master ]
   schedule:
     - cron: '30 5,17 * * *'
-
+    
 permissions:
   contents: read
 
@@ -20,17 +20,24 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go', 'javascript' ]
+        language: [ 'go' ]
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
-        debug: true
+        debug: false
+        config-file: ./.github/codeql/codeql-config.yml              
+    
+    # Autobuild attempts to build any compiled languages
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2    
+
+    # Perform Analysis
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2