Question

Your team enabled CodeQL code scanning default setup for a repository, but you notice the code scanning results only include JavaScript alerts even though the repository also contains a substantial Python backend and some C# tooling scripts. You want CodeQL to analyze the Python code as well without abandoning the maintainability of default setup. What is the correct approach?

Accepted Answer

Edit the repository's code scanning default setup configuration and explicitly add Python to the list of languages to be scanned.

Answer

Switch to advanced setup because default setup can only ever analyze a single language per repository.

Answer

Add a `paths` filter to the default setup so CodeQL is forced to include the Python source directories in its scan.

Answer

Create a separate repository for the Python code, since CodeQL default setup cannot combine multiple languages in one repository.