Documented: CodeQL C/C++ autobuild failures on PR and push checks #11

Summary

SentinelAI previously had failing CodeQL checks for both the pull-request and push events:

• CodeQL / analyze (c-cpp) — pull_request
• CodeQL / analyze (c-cpp) — push

Python and JavaScript/TypeScript CodeQL analysis was successful.

Root cause

The CodeQL workflow detected C/C++ sources and invoked the automatic C/C++ autobuilder. The repository does not contain a supported C++ build system such as CMake, Make, or a compatible project build definition, so CodeQL reported:

No supported build system detected.

This was a workflow configuration failure, not a newly identified C/C++ vulnerability.

Remediation

The CodeQL workflow was updated to:

• retain repository language detection;
• use CodeQL no-build extraction with build-mode: none;
• preserve Python and JavaScript/TypeScript analysis;
• apply the same behavior to push and pull-request executions.

Verification

The replacement CodeQL run passed all jobs:

• language detection — passed;
• Python analysis — passed;
• JavaScript/TypeScript analysis — passed;
• C/C++ analysis — passed.

PR: SentinelAI #10

Follow-up

If SentinelAI later adds a supported C/C++ build system, replace no-build extraction for C/C++ with explicit build steps so CodeQL can produce more complete compiled-language analysis.