Merge pull request #21102 from github/smowton/admin/respect-config-paths-filters-pre-finalize

All languages: account for paths and paths-ignore in XML and other ancillary extraction

Author: smowton

csharp/ql/lib/change-notes/2026-01-06-paths-directives-ancillary-data.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the C# extractor's search for `.config`, `.props`, XML and project files.

csharp/tools/pre-finalize.cmd

@@ -5,6 +5,7 @@ type NUL && "%CODEQL_DIST%\codeql" database index-files ^
     --include-extension=.csproj ^
     --include-extension=.props ^
     --include-extension=.xml ^
+    --also-match-lgtm-index-filters ^
     --size-limit 10m ^
     --language xml ^
     --working-dir=. ^

csharp/tools/pre-finalize.sh

@@ -7,6 +7,7 @@ set -eu
     --include-extension=.csproj \
     --include-extension=.props \
     --include-extension=.xml \
+    --also-match-lgtm-index-filters \
     --size-limit 10m \
     --language xml \
     --working-dir=. \

go/codeql-tools/pre-finalize.cmd

@@ -9,6 +9,7 @@ if NOT "%CODEQL_EXTRACTOR_GO_EXTRACT_HTML%"=="no" (
                         --include-extension=.xhtm ^
                         --include-extension=.xhtml ^
                         --include-extension=.vue ^
+                        --also-match-lgtm-index-filters ^
                         --size-limit 10m ^
                         --language html ^
                         -- ^

go/codeql-tools/pre-finalize.sh

@@ -10,6 +10,7 @@ if [ "${CODEQL_EXTRACTOR_GO_EXTRACT_HTML:-yes}" != "no" ]; then
                         --include-extension=.xhtm \
                         --include-extension=.xhtml \
                         --include-extension=.vue \
+                        --also-match-lgtm-index-filters \
                         --size-limit 10m \
                         --language html \
                         -- \

go/ql/lib/change-notes/2026-01-06-paths-directives-ancillary-data.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the Go extractor's search for `.vue` and HTML files.

python/ql/lib/change-notes/2026-01-06-paths-directives-ancillary-data.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the Python extractor's search for YAML files.

python/tools/pre-finalize.cmd

@@ -3,6 +3,7 @@
 type NUL && "%CODEQL_DIST%\codeql" database index-files ^
     --include-extension=.yaml ^
     --include-extension=.yml ^
+    --also-match-lgtm-index-filters ^
     --size-limit=5m ^
     --language yaml ^
     -- ^

python/tools/pre-finalize.sh

@@ -5,6 +5,7 @@ set -eu
 "$CODEQL_DIST/codeql" database index-files \
     --include-extension=.yaml \
     --include-extension=.yml \
+    --also-match-lgtm-index-filters \
     --size-limit=5m \
     --language yaml \
     -- \

ql/tools/pre-finalize.cmd

@@ -3,6 +3,7 @@
 type NUL && "%CODEQL_DIST%\codeql" database index-files ^
     --include=**/qlpack.yml ^
     --include-extension=.qlref ^
+    --also-match-lgtm-index-filters ^
     --size-limit=5m ^
     --language yaml ^
     -- ^