From 6ed26fb81eefc9dcabb3cb7b778d7044b0ec8600 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 17 Jul 2026 21:58:03 +0100
Subject: [PATCH] =?UTF-8?q?fix(ci):=20repair=20CodeQL=20workflow=20?=
 =?UTF-8?q?=E2=80=94=20valid=20YAML=20+=20drop=20beta-Rust=20leg?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Two defects in .github/workflows/codeql.yml:
1. The `strategy:` block was indented 2 spaces — floating as a sibling of the
   `analyze` job instead of nested inside it — with a misaligned matrix leg, so
   the file did not parse as YAML (actionlint: "did not find expected '-'
   indicator"). CodeQL never ran.
2. The only matrix language was `rust`, whose CodeQL support is beta and
   cancels/hangs.

Re-indented the strategy block under the job and set the leg to `actions`
(non-empty matrix, no zero-jobs startup_failure). Rust security belongs in
cargo-audit/clippy.

Verified with actionlint: no parse/syntax errors; actions leg present, no
active rust leg.

Part of the estate-wide CI cleanup (13 repos; reference hyperpolymath/gitbot-fleet#375).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/codeql.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 45230da..0c8a5bd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,12 +27,12 @@ jobs:
     permissions:
       contents: read
       security-events: write
-  strategy:
-    fail-fast: false
-    matrix:
-      include:
-         - language: rust
-          build-mode: default
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - language: actions
+            build-mode: none
 
     steps:
       - name: Checkout