Repository navigation
Compliance: codeql-default-setup-not-configured #109
Description
Compliance Finding
Category: ci-workflows
Severity: error
Check: codeql-default-setup-not-configured
Detail
CodeQL default setup is in state {"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"} (expected configured). Run apply-repo-settings.sh broodly or gh api -X PATCH repos/petry-projects/broodly/code-scanning/default-setup -F state=configured -F query_suite=default.
Standard Reference
standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
Remediation
Please review the linked standard and bring this repository into compliance.
See the full standards documentation for implementation guidance.
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon Apr 9, 2026
Weekly Compliance Audit (2026-04-09)
This finding is still open.
Detail: CodeQL default setup is in state
{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}(expectedconfigured). Runapply-repo-settings.sh broodlyorgh api -X PATCH repos/petry-projects/broodly/code-scanning/default-setup -F state=configured -F query_suite=default.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 9, 2026
Claude encountered an error —— View job
I'll analyze this and get back to you.
don-petry commentedon Apr 10, 2026
Weekly Compliance Audit (2026-04-10)
This finding is still open.
Detail: CodeQL default setup is in state
{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}(expectedconfigured). Runapply-repo-settings.sh broodlyorgh api -X PATCH repos/petry-projects/broodly/code-scanning/default-setup -F state=configured -F query_suite=default.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 14, 2026
Claude finished @don-petry's task in 3m 45s —— View job •
claude/issue-109-20260414-1218• [Create PR ➔](https://github.com/petry-projects/broodly/compare/main...claude/issue-109-20260414-1218?quick_pull=1&title=Issue%20%23109%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23109%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)Fixing CodeQL Default Setup Compliance
codeql.ymlstate=configured,query_suite=default).github/workflows/codeql.yml(drift per org standard §2)Summary
Two actions taken to resolve the
codeql-default-setup-not-configuredcompliance finding:Configured CodeQL default setup via GitHub API —
gh api -X PATCH repos/petry-projects/broodly/code-scanning/default-setup -F state=configured -F query_suite=defaultran successfully. GitHub is now scanning all detected languages (JavaScript/TypeScript, Go, Actions).Removed drift
.github/workflows/codeql.yml— Per org standard §2, GitHub-managed default setup is the required approach. Per-repocodeql.ymlworkflow files are explicitly classified as drift by the compliance audit. PR #126 removes the file.View PR #126 |
ci: remove drift codeql.yml and enable GitHub-managed default setup
don-petry commentedon Apr 17, 2026
Weekly Compliance Audit (2026-04-17)
This finding is still open.
Detail: CodeQL default setup is in state
{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}{"message":"Resource not accessible by personal access token","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#get-a-code-scanning-default-setup-configuration","status":"403"}(expectedconfigured). Runapply-repo-settings.sh broodlyorgh api -X PATCH repos/petry-projects/broodly/code-scanning/default-setup -F state=configured -F query_suite=default.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 18, 2026
Claude encountered an error —— View job
Fixing CodeQL Default Setup Compliance
11 remaining items
ci: remove drift codeql.yml and enable GitHub-managed default setup
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
don-petry commentedon Jun 5, 2026
Resolved! This check is now passing as of 2026-06-05. Closing automatically.
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
feat: implement issue #407 — Compliance: ruleset-drift-pr-quality-req…
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
ci: remove drift codeql.yml, enable GitHub-managed default setup (#126)
feat: implement issue #409 — Compliance: ruleset-drift-pr-quality-req…