Skip to content

Compliance: stray-codeql-workflow #66

Closed

Description

@don-petry

Compliance Finding

Category: ci-workflows
Severity: error
Check: stray-codeql-workflow

Detail

Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

Standard Reference

standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry commented on Apr 9, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-09)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  2. don-petry commented on Apr 9, 2026

    @don-petry
    ContributorAuthor

    Claude encountered an error —— View job


    I'll analyze this and get back to you.

  3. don-petry commented on Apr 10, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-10)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  4. don-petry commented on Apr 14, 2026

    @don-petry
    ContributorAuthor

    Claude finished @don-petry's task in 51s —— View job • claude/issue-66-20260414-1413 • [Create PR ➔](https://github.com/petry-projects/ContentTwin/compare/main...claude/issue-66-20260414-1413?quick_pull=1&title=Issue%20%2366%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%2366%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing Compliance Issue: stray-codeql-workflow

    • Analyze issue and gather context
    • Check if .github/workflows/codeql.yml exists
    • Delete the file and commit
    • Create pull request

    Done. Deleted .github/workflows/codeql.yml (34 lines removed) to bring the repo into compliance with the org standard for GitHub-managed CodeQL default setup. No custom query packs, build modes, or path filters were present that would require an exception.

    PR #76 |

  5. added a commit that references this issue on Apr 14, 2026
    b16584b
  6. don-petry commented on Apr 17, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-17)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  7. don-petry commented on Apr 18, 2026

    @don-petry
    ContributorAuthor

    Claude finished @don-petry's task in 1m 36s —— View job • claude/issue-66-20260418-1840 • [Create PR ➔](https://github.com/petry-projects/ContentTwin/compare/main...claude/issue-66-20260418-1840?quick_pull=1&title=Issue%20%2366%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%2366%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing Compliance Issue: stray-codeql-workflow

    • Analyze issue and gather context
    • Check current state: .github/workflows/codeql.yml still exists; PR ci: remove stray codeql.yml workflow #76 (previous attempt) is open but unmerged
    • Delete the file and commit (34 lines removed)
    • Create pull request: PR #85

    Done. Deleted .github/workflows/codeql.yml to bring the repo into compliance with the org standard for GitHub-managed CodeQL default setup. The file contained no custom query packs, build modes, or path filters that would require an exception. PR #76 (previous attempt) was still open and unmerged — PR #85 supersedes it.

    PR #85 | | claude/issue-66-20260418-1840

  8. added a commit that references this issue on Apr 18, 2026
    8f81000
  9. 10 remaining items

  10. don-petry commented on May 11, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-11)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  11. don-petry commented on May 12, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  12. don-petry commented on May 12, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  13. don-petry commented on May 12, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  14. don-petry commented on May 12, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  15. don-petry commented on May 12, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  16. don-petry commented on May 13, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-13)

    This finding is still open.

    Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

    Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

  17. added 2 commits that reference this issue on May 13, 2026
    958960b
    2e2a5a8
  18. added 2 commits that reference this issue on May 13, 2026
    9537051
    b006950
  19. added a commit that references this issue on Aug 3, 2026
    5b95ca1
  20. added 2 commits that reference this issue on Aug 18, 2026
    34137eb
    df81728
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit finding

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions