pkl / PR 1548
Add custom CodeQL query to prevent project evaluator misuse in the CLI
apple/pkl#1548 openmixed
+19/−1lines
3files
0comments
2026-04-23opened
-merged
What it touches
ci: 2 main: 1
Modules: .github (2), pkl-commons-cli (1)
Architectural impact (arcade-agent diff_impact)
No production Java file of this PR maps into the dependency graph (tests, build, CI or docs only). Tests are excluded from the graph by design.
Build & CI relevance
- Touches CI workflows: review runner matrix, timeouts, caching.
Files
| ci | .github/codeql-queries/cli-project-evaluator-settings.ql |
| ci | .github/workflows/codeql.yml |
| main | pkl-commons-cli/src/main/kotlin/org/pkl/commons/cli/CliCommand.kt |