codeql: don't report world-writable files

Signed-off-by: Thomas Weißschuh <thomas@t-8ch.de>

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e4f4c09b9b715e3fd2de6b51df6b1977ddb79e51..d53f74e8a41c5c570eae22d63db3a3091982b1d2 100644 (file)
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,6 +45,8 @@ jobs:
                 id: cpp/path-injection
             - exclude:
                 id: cpp/uncontrolled-process-operation
+            - exclude:
+                id: cpp/world-writable-file-creation
 
       - name: Install dependencies
         run: sudo -E .github/workflows/cibuild-setup-ubuntu.sh