[BugFix] CodeQL: Add Python Config File (#7742)

* add python config file for codeql

* ci: run lint checks for CodeQL changes

.github/codeql/python.yml

@@ -0,0 +1,7 @@
+name: python
+paths-ignore:
+  # Cookiecutter template sources contain Jinja placeholders ({{ ... }}, {% ... %})
+  # and are not valid Python until rendered, so CodeQL cannot parse them.
+  # The wildcard stands in for the literal "{{cookiecutter.project_tag}}" directory.
+  # The template's hooks/ are plain Python and stay in scope.
+  - 'cookiecutter/openbb_cookiecutter/template/*cookiecutter.project_tag*/**'

.github/workflows/codeql.yml

@@ -13,11 +13,11 @@ name: "CodeQL Advanced"
 
 on:
   push:
-    branches: [ "develop", "PR-review", "gh-pages", "main", "v5" ]
+    branches: [ "develop", "PR-review", "gh-pages", "main" ]
     paths-ignore:
       - 'cookiecutter/**'
   pull_request:
-    branches: [ "develop", "PR-review", "gh-pages", "main", "v5" ]
+    branches: [ "develop", "PR-review", "gh-pages", "main" ]
     paths-ignore:
       - 'cookiecutter/**'
   schedule:
@@ -52,7 +52,7 @@ jobs:
           config-file: ''
         - language: python
           build-mode: none
-          config-file: ''
+          config-file: .github/codeql/python.yml
         - language: rust
           build-mode: none
           config-file: .github/codeql/desktop-only.yml

.github/workflows/lint-openbb-platform.yml

@@ -13,6 +13,8 @@ on:
       - '!openbb_platform/providers/**'
       - '!openbb_platform/obbject_extensions/**'
       - '.github/workflows/lint-openbb-platform.yml'
+      - '.github/codeql/**'
+      - '.github/workflows/codeql.yml'
   merge_group:
     types: [checks_requested]