name: "Solar of Things CodeQL config"

# Only scan the actual integration code — ignore tests and any future fixtures
paths:
  - custom_components/solar_of_things

paths-ignore:
  - tests/
  - "**/*.md"

queries:
  - uses: security-extended

# Note: py/weak-sensitive-data-hashing is suppressed inline in api.py with
# "# noqa: S324" and an explanatory comment. The Siseli portal API requires
# MD5(password) — the server returns error code 7 for plaintext. This is a
# protocol requirement of the upstream service, not password storage, and is
# transmitted over HTTPS only.