From c9d7b9d4c65c90ff67ac779bc58d6ed367fecb86 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 15 May 2026 17:42:19 +0000 Subject: [PATCH] ci(codeql): scan `actions` instead of javascript-typescript The repo has no JS/TS sources (language policy bans them; codebase is Rust/ReScript), so the CodeQL `javascript-typescript` matrix exits with "no source files" on every run and produces no analysis. Switch the matrix to `actions`, which scans the workflow files every repo has and gives the security-events upload something real to report. https://claude.ai/code/session_017KxkerbS1hjJwipTExFxLc --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5148cf4..f491e12 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -21,7 +21,7 @@ jobs: fail-fast: false matrix: include: - - language: javascript-typescript + - language: actions build-mode: none steps: