Skip to content

Drop advanced CodeQL; Default Setup owns scans - #12

Merged
ShugokiFable merged 1 commit into
mainfrom
security/codeql-default-setup
Sep 4, 2026
Merged

Drop advanced CodeQL; Default Setup owns scans#12
ShugokiFable merged 1 commit into
mainfrom
security/codeql-default-setup

Conversation

@ShugokiFable

Copy link
Copy Markdown
Owner

GitHub CodeQL Default Setup is already configured (python, go, actions). The advanced workflow .github/workflows/codeql.yml is disabled_manually, so Dependabot PR #11 (bump codeql-action) cannot run it and also fails the MANIFEST hash gate.

This PR:

  • Deletes the advanced CodeQL workflow
  • Removes the codeql-action Dependabot group (Default Setup is not that workflow)
  • Updates the CI test so it no longer requires grouping a workflow that is gone
  • Resyncs MANIFEST.json sha256+size for every gated path this commit changes

Do not merge dependabot/github_actions/codeql-action PR #11.

GitHub Default Setup is already configured. The advanced workflow
was disabled_manually, Dependabot PR #11 could not run it, and
bumping codeql-action failed the MANIFEST hash gate.

Remove .github/workflows/codeql.yml, drop the codeql-action
Dependabot group, and resync MANIFEST.json sha256+size for the
gated paths changed in this commit.
@ShugokiFable
ShugokiFable merged commit f015aaa into main Sep 4, 2026
14 checks passed
@ShugokiFable
ShugokiFable deleted the security/codeql-default-setup branch September 4, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant