Skip to content

chore(ci): restore CodeQL workflow (repo is now public)#47

Merged
ElMatiOfficial merged 1 commit intomainfrom
chore/restore-codeql
Apr 24, 2026
Merged

chore(ci): restore CodeQL workflow (repo is now public)#47
ElMatiOfficial merged 1 commit intomainfrom
chore/restore-codeql

Conversation

@ElMatiOfficial
Copy link
Copy Markdown
Owner

Reverses #38. Now that the repo is public, CodeQL is free and the original workflow works unchanged — no more "Code scanning is not enabled for this repository" red.

Changes

Test plan

  • CI: the 5 existing jobs stay green.
  • NEW: `Analyze (javascript-typescript)` runs and passes — first time since CodeQL was removed. Uploaded SARIF should show up at Security → Code scanning alerts.
  • Any findings CodeQL surfaces: each gets its own issue; none block this PR.

CodeQL was removed in #38 because on private repos the SARIF upload
fails with 'Code scanning is not enabled for this repository' —
enabling it there requires GitHub Advanced Security, which isn't on
this plan. The repo flipped public immediately before this commit, so
CodeQL is free and the original workflow works unchanged.

Restoring the exact file from the commit that first introduced it
(21e186c) keeps the history bisect-friendly. Docs reverted too —
DEPLOYMENT.md and SECURITY_ARCHITECTURE.md both had notes about the
temporary disablement.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-advanced-security
Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@ElMatiOfficial ElMatiOfficial merged commit 636fd77 into main Apr 24, 2026
7 checks passed
@ElMatiOfficial ElMatiOfficial deleted the chore/restore-codeql branch April 24, 2026 00:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants