From 1a6b052a82a0bdb543001551760f6207980627c4 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 18 May 2026 04:42:33 +0100 Subject: [PATCH] ci(codeql): converge to canonical language-autodetect workflow (Refs #8) k9iser's codeql.yml was a stale hardcoded `javascript-typescript`-only matrix (left as a local security workflow by the b618a53 bundle migration). On this Rust-only repo CodeQL exits with a permanent false-red 'no source / configuration error' on the analyze job. Replace it verbatim with the canonical estate template shipped by rsr-template-repo / v3-templater / reposystem: a detect job reads the repo's actual language stats and only analyses CodeQL-supported, buildless-safe languages (here: rust), skipping entirely when none apply. Also brings the estate concurrency guardrail (cancel superseded runs). This is resolve-at-source + convergence to the central canonical template rather than a k9iser-local divergence. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/codeql.yml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index dfcbdc4..3a53046 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -15,14 +15,6 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true -# Estate guardrail: cancel superseded runs so re-pushes / rebased PR -# updates do not pile up queued runs against the shared account-wide -# Actions concurrency pool. Applied only to read-only check workflows -# (no publish/mutation), so cancelling a superseded run is always safe. -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - permissions: contents: read