From 2fd7b61a89dee0537cf89b4233d40010c802fff1 Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Wed, 16 Jul 2025 15:37:30 -0700
Subject: [PATCH 1/2] chore: add CodeQL.yml

---
 CodeQL.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 CodeQL.yml

diff --git a/CodeQL.yml b/CodeQL.yml
new file mode 100644
index 00000000..6f3d29c8
--- /dev/null
+++ b/CodeQL.yml
@@ -0,0 +1,16 @@
+path_classifiers:
+  test:
+    # Note: use only forward slash / as a path separator.
+    # *  Matches any sequence of characters except a forward slash.
+    # ** Matches any sequence of characters, including a forward slash.
+    # This wildcard must either be surrounded by forward slash symbols, or used as the first segment of a path.
+    # It matches zero or more whole directory segments. There is no need to use a wildcard at the end of a directory path because all sub-directories are automatically matched.
+    # That is, /anything/ matches the anything directory and all its subdirectories.
+    # Always enclose the expression in double quotes if it includes *.
+    - "**/tests"
+
+  # The default behavior is to tag all files created during the
+  # build as `generated`. Results are hidden for generated code. You can tag
+  # further files as being generated by adding them to the `generated` section.
+  generated:
+    - target

From 83c9e96319c27b2fda248aa2df8e322ddfb5b207 Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Wed, 16 Jul 2025 15:55:15 -0700
Subject: [PATCH 2/2] polish

---
 CodeQL.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CodeQL.yml b/CodeQL.yml
index 6f3d29c8..c9a569de 100644
--- a/CodeQL.yml
+++ b/CodeQL.yml
@@ -7,7 +7,7 @@ path_classifiers:
     # It matches zero or more whole directory segments. There is no need to use a wildcard at the end of a directory path because all sub-directories are automatically matched.
     # That is, /anything/ matches the anything directory and all its subdirectories.
     # Always enclose the expression in double quotes if it includes *.
-    - "**/tests"
+    - "**/tests/**"
 
   # The default behavior is to tag all files created during the
   # build as `generated`. Results are hidden for generated code. You can tag