Question: customize CodeQL config to improve false positives?

[pushfoo]

tl;dr

@Square789 and I have both had CodeQL flag lines in our PRs which were one or more of the following:

1. Pre-existing problems either near or overlapping with parts of the project we replaced
2. Useful to keep, such as commenting out logic which would be nice to have an ignore signal for

Potential approaches

The queries section in the codeql.yaml file should allow us to tune this.

pyglet/.github/workflows/codeql.yml

Lines 25 to 41 in 9d35309

	steps:
	- name: Checkout
	uses: actions/checkout@v3
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v2
	with:
	languages: ${{ matrix.language }}
	queries: +security-and-quality
	- name: Autobuild
	uses: github/codeql-action/autobuild@v2
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2
	with:
	category: "/language:${{ matrix.language }}"

For additional context, see:

• Simplify debug_print and annotate non-codec utils #973
• Audio backend rework #975