Skip to content

fix(ci): repair CodeQL workflow (invalid YAML + drop beta-Rust leg)#133

Merged
hyperpolymath merged 2 commits into
mainfrom
fix/codeql-drop-rust-beta-leg
Jul 17, 2026
Merged

fix(ci): repair CodeQL workflow (invalid YAML + drop beta-Rust leg)#133
hyperpolymath merged 2 commits into
mainfrom
fix/codeql-drop-rust-beta-leg

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

What

.github/workflows/codeql.yml had two defects:

  1. The strategy: block was indented 2 spaces — floating outside the analyze job — with a misaligned matrix leg, so the file did not parse as YAML (actionlint: did not find expected '-' indicator). CodeQL never ran.
  2. The only matrix language was rust (beta CodeQL — cancels/hangs).

Fix

Re-indent the strategy block under the job; set the leg to actions (non-empty matrix, no zero-jobs startup_failure).

Verification

actionlint: no parse/syntax errors; actions leg present, no active rust leg.

Context

Estate-wide shared-fate: 13 repos carried the beta-Rust CodeQL leg. Reference: hyperpolymath/gitbot-fleet#375.

🤖 Generated with Claude Code

Two defects in .github/workflows/codeql.yml:
1. The `strategy:` block was indented 2 spaces — floating as a sibling of the
   `analyze` job instead of nested inside it — with a misaligned matrix leg, so
   the file did not parse as YAML (actionlint: "did not find expected '-'
   indicator"). CodeQL never ran.
2. The only matrix language was `rust`, whose CodeQL support is beta and
   cancels/hangs.

Re-indented the strategy block under the job and set the leg to `actions`
(non-empty matrix, no zero-jobs startup_failure). Rust security belongs in
cargo-audit/clippy.

Verified with actionlint: no parse/syntax errors; actions leg present, no
active rust leg.

Part of the estate-wide CI cleanup (13 repos; reference hyperpolymath/gitbot-fleet#375).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@hyperpolymath
hyperpolymath marked this pull request as ready for review July 17, 2026 22:05
@hyperpolymath
hyperpolymath enabled auto-merge (squash) July 17, 2026 22:05
@hyperpolymath
hyperpolymath disabled auto-merge July 17, 2026 22:40
@hyperpolymath
hyperpolymath merged commit 84b9b31 into main Jul 17, 2026
25 of 38 checks passed
@hyperpolymath
hyperpolymath deleted the fix/codeql-drop-rust-beta-leg branch July 17, 2026 22:40
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant