From 22f0a6a087566a5c0855b9d6a3d5fcb8de858514 Mon Sep 17 00:00:00 2001 From: SatoshiQaziMuhammed Date: Fri, 2 Oct 2026 04:40:19 +0400 Subject: [PATCH] ci: drop the CodeQL job from security.yml (#18) The organisation's code security configuration enables CodeQL default setup, and GitHub refuses to apply it while a workflow runs CodeQL itself: the configuration failed on this repository with "Code scanning conflict". Default setup covers what this job did. The job ran the default query suite with no config file, path filters or packs, and the languages it analysed are among those default setup detects here. Default setup takes over the scan; this workflow keeps its other jobs. security-events: write served only the SARIF upload, so it goes with it. contents: read is all the remaining jobs need. --- .github/workflows/security.yml | 34 ---------------------------------- 1 file changed, 34 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 04da1ce..57553f4 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -10,42 +10,8 @@ on: permissions: contents: read - security-events: write jobs: - codeql: - name: CodeQL Analysis - runs-on: ubuntu-latest - - steps: - - name: Checkout - uses: actions/checkout@v4 - - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: typescript - - - name: Setup Node.js - uses: actions/setup-node@v4 - with: - node-version: '18' - - - name: Enable Corepack - run: corepack enable - - - name: Install dependencies - run: yarn install --immutable - - - name: Generate types - run: ./node_modules/.bin/subql codegen pezkuwi.yaml - - - name: Build - run: ./node_modules/.bin/subql build pezkuwi.yaml - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 - dependency-audit: name: Dependency Audit runs-on: ubuntu-latest