From 1902b5430185c089b22a3f22695107a7a15a2b46 Mon Sep 17 00:00:00 2001 From: Phil Haack Date: Wed, 25 Feb 2026 15:58:57 -0800 Subject: [PATCH] Remove push trigger from CodeQL workflow The org-level "Address CodeQL findings" ruleset requires CodeQL results before pushing to main. When the release workflow pushes a version bump commit directly to main, GitHub blocks it because CodeQL hasn't scanned that commit yet. By removing the push trigger, CodeQL only runs on PRs and on schedule. This matches how posthog-go handles it and unblocks the release workflow while still scanning every PR before merge. --- .github/workflows/codeql.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6dea15b9..1a621863 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,8 +1,6 @@ name: 'CodeQL Advanced' on: - push: - branches: ['main'] pull_request: branches: ['main'] schedule: