CI CodeQL: Code Filter

C++ analysis does not yet support

.github/codeql/impactx-codeql.yml

@@ -1,5 +1,6 @@
 name: "ImpactX CodeQL config"
 
 # ignore ABLASTR, AMReX, pyAMReX, openPMD et al.
+# note: not yet suppored, thus doing post-analysis SARIF filtering
 paths-ignore:
   - build/_deps

.github/workflows/codeql.yml

@@ -68,3 +68,23 @@ jobs:
         uses: github/codeql-action/analyze@v2
         with:
           category: "/language:${{ matrix.language }}"
+          upload: False
+          output: sarif-results
+
+      - name: filter-sarif
+        uses: advanced-security/filter-sarif@v1
+        with:
+          patterns: |
+            -build/_deps/*/*
+            -build/_deps/*/*/*
+            -build/_deps/*/*/*/*
+            -build/_deps/*/*/*/*/*
+            -build/_deps/*/*/*/*/*/*
+            -build/_deps/*/*/*/*/*/*/*
+          input: sarif-results/${{ matrix.language }}.sarif
+          output: sarif-results/${{ matrix.language }}.sarif
+
+      - name: Upload SARIF
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: sarif-results/${{ matrix.language }}.sarif