name: "MikroTik Manager CodeQL config"

# Rate limiting is enforced globally in Express — `app.use('/api', rateLimitRedis(...))`
# in backend/src/index.ts, plus dedicated limiters on auth/login/TOTP/OIDC routes.
# CodeQL's data flow can't attribute a global app-level middleware to each individual
# route handler, so `js/missing-rate-limiting` fires on ~every DB/fs handler as a false
# positive. Exclude it rather than carry dozens of non-actionable "high" alerts.
query-filters:
  - exclude:
      id: js/missing-rate-limiting