codeQL

custom codeql queries and shared lint configuration for the HighFive repositories.

layout

.codeql/
  qlpack.yml          query pack definition
  queries/            clean-code queries (long functions, magic numbers,
                      too many parameters, missing docstrings)
.github/workflows/
  code-quality.yml    compiles and validates the queries on push and pr
pyproject.toml        shared ruff, mypy, bandit, and pytest settings

notes

• the workflow validates that the queries compile; running them against the other repositories is done through each repo's own scanning setup.
• pyproject.toml is the central place for python tool settings. the testpaths entries assume the repos are checked out side by side in one working folder.