feat(ci): adjust CodeQL job timeout and add Rust env variables

[kartikeya-27]

Updated timeout settings for CodeQL jobs and added environment variables for Rust.

Summary by CodeRabbit

• Chores
  • Improved automated security analysis coverage for Rust projects.
  • Added language-specific analysis time limits for more predictable checks.
  • Improved reliability when accessing Cargo registries during analysis.
  • Clarified Rust analysis configuration and workspace coverage.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ca3e5c9a-af2e-4db6-8e98-8caf909edd2b

📥 Commits

Reviewing files that changed from the base of the PR and between 40e0485 and c58f6ef.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• ByteVeda/taskito (manual)

---

📝 Walkthrough

Walkthrough

The CodeQL workflow adds Rust analysis with build-mode: none. It also configures language-specific timeouts, Cargo registry retries, job permissions, and Rust analysis comments.

Changes

CodeQL analysis

Layer / File(s)	Summary
CodeQL matrix and job configuration .github/workflows/codeql.yml	The workflow adds Rust to the CodeQL matrix, sets 30-minute timeouts for Python and JavaScript/TypeScript, sets a 45-minute timeout for Rust, configures Cargo retries, and declares job permissions.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related issues

• CodeQL does not scan the Rust crates #585 — Adds Rust to the CodeQL analysis matrix and configures its build mode and timeout.

Suggested reviewers: pratyush618

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the CodeQL timeout updates and Rust environment variable changes in the CI configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.