From e7060d42ac9f40eaef7805301adc739ed123bc35 Mon Sep 17 00:00:00 2001 From: Adrian Llopart Date: Sun, 21 Jun 2026 10:17:54 +0200 Subject: [PATCH] =?UTF-8?q?ci:=20drop=20codeql.yml=20=E2=80=94=20managed?= =?UTF-8?q?=20"Code=20quality"=20default=20setup=20owns=20code=20scanning?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The repo's CodeQL default setup (Settings → Code security, event dynamic/github-code-scanning/codeql) is enabled and running, so this advanced workflow is redundant. Two active CodeQL configs produce duplicate analyses and "multiple configurations" warnings. Keep the managed setup (zero-maintenance, auto-updated); remove the workflow. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_0138qS6baPZutQ7s2fMbfNv3 --- .github/workflows/codeql.yml | 33 --------------------------------- 1 file changed, 33 deletions(-) delete mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml deleted file mode 100644 index 9cd1ed7..0000000 --- a/.github/workflows/codeql.yml +++ /dev/null @@ -1,33 +0,0 @@ -name: CodeQL - -# GitHub code scanning (CodeQL). Free for public repositories — results show up -# under the repo's Security → Code scanning tab. Secret scanning and push -# protection are separate toggles in Settings → Code security (also free for -# public repos) and can't be enabled from a workflow file. -on: - push: - branches: [dev, main] - pull_request: - branches: [dev, main] - schedule: - - cron: "27 4 * * 1" # weekly, Mondays — catches advisories on untouched code - -jobs: - analyze: - name: Analyze (javascript-typescript) - runs-on: ubuntu-latest - permissions: - contents: read - security-events: write # required to upload CodeQL results - steps: - - name: Checkout - uses: actions/checkout@v4 - - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: javascript-typescript - queries: security-and-quality - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3