diff options
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 6 | ||||
-rw-r--r-- | etc/inc/disable-common.inc | 3 |
2 files changed, 6 insertions, 3 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9cf216492..c232f59d9 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -88,7 +88,7 @@ jobs: | |||
88 | 88 | ||
89 | # Initializes the CodeQL tools for scanning. | 89 | # Initializes the CodeQL tools for scanning. |
90 | - name: Initialize CodeQL | 90 | - name: Initialize CodeQL |
91 | uses: github/codeql-action/init@3ebbd71c74ef574dbc558c82f70e52732c8b44fe | 91 | uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 |
92 | with: | 92 | with: |
93 | languages: ${{ matrix.language }} | 93 | languages: ${{ matrix.language }} |
94 | # If you wish to specify custom queries, you can do so here or in a config file. | 94 | # If you wish to specify custom queries, you can do so here or in a config file. |
@@ -99,7 +99,7 @@ jobs: | |||
99 | # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). | 99 | # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). |
100 | # If this step fails, then you should remove it and run the build manually (see below) | 100 | # If this step fails, then you should remove it and run the build manually (see below) |
101 | - name: Autobuild | 101 | - name: Autobuild |
102 | uses: github/codeql-action/autobuild@3ebbd71c74ef574dbc558c82f70e52732c8b44fe | 102 | uses: github/codeql-action/autobuild@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 |
103 | 103 | ||
104 | # âšī¸ Command-line programs to run using the OS shell. | 104 | # âšī¸ Command-line programs to run using the OS shell. |
105 | # đ https://git.io/JvXDl | 105 | # đ https://git.io/JvXDl |
@@ -113,4 +113,4 @@ jobs: | |||
113 | # make release | 113 | # make release |
114 | 114 | ||
115 | - name: Perform CodeQL Analysis | 115 | - name: Perform CodeQL Analysis |
116 | uses: github/codeql-action/analyze@3ebbd71c74ef574dbc558c82f70e52732c8b44fe | 116 | uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 |
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 03daaa9a6..81f417232 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -450,6 +450,9 @@ blacklist ${HOME}/.vaults | |||
450 | blacklist /run/timeshift | 450 | blacklist /run/timeshift |
451 | blacklist /var/backup | 451 | blacklist /var/backup |
452 | 452 | ||
453 | # dm-crypt / LUKS | ||
454 | blacklist /crypto_keyfile.bin | ||
455 | |||
453 | # Remove environment variables with auth tokens. | 456 | # Remove environment variables with auth tokens. |
454 | # Note however that the sandbox might still have access to the | 457 | # Note however that the sandbox might still have access to the |
455 | # files where these variables are set. | 458 | # files where these variables are set. |