Repository navigation
Compliance: stray-codeql-workflow #93
Description
Compliance Finding
Category: ci-workflows
Severity: error
Check: stray-codeql-workflow
Detail
Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.
Standard Reference
standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
Remediation
Please review the linked standard and bring this repository into compliance.
See the full standards documentation for implementation guidance.
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon Apr 9, 2026
Weekly Compliance Audit (2026-04-09)
This finding is still open.
Detail: Repo still ships
.github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR againststandards/ci-standards.mdto record the exception before re-adding the workflow.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 9, 2026
Claude encountered an error —— View job
I'll analyze this and get back to you.
don-petry commentedon Apr 10, 2026
Weekly Compliance Audit (2026-04-10)
This finding is still open.
Detail: Repo still ships
.github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR againststandards/ci-standards.mdto record the exception before re-adding the workflow.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 14, 2026
Claude finished @don-petry's task in 48s —— View job •
claude/issue-93-20260414-1300• Create PR ➔Fixing Compliance Issue: stray-codeql-workflow
.github/workflows/codeql.ymlexists in the repocodeql.ymlworkflow fileDeleted
.github/workflows/codeql.yml(36 lines). The org now uses GitHub-managed CodeQL default setup, so the per-repo workflow file was duplicate/drift.ci: remove stray codeql.yml workflow (closes #93)
don-petry commentedon Apr 17, 2026
Weekly Compliance Audit (2026-04-17)
This finding is still open.
Detail: Repo still ships
.github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR againststandards/ci-standards.mdto record the exception before re-adding the workflow.Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup
don-petry commentedon Apr 18, 2026
Claude finished @don-petry's task in 48s —— View job •
claude/issue-93-20260418-1841• [Create PR ➔](https://github.com/petry-projects/markets/compare/main...claude/issue-93-20260418-1841?quick_pull=1&title=Issue%20%2393%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%2393%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)Fixing Compliance Issue: stray-codeql-workflow
.github/workflows/codeql.ymlexists in the repocodeql.ymlworkflow fileDeleted
.github/workflows/codeql.yml(36 lines). The org now uses GitHub-managed CodeQL default setup, so the per-repo workflow file was duplicate drift. PR created: petry-projects/markets#111•
claude/issue-93-20260418-1841ci: remove stray codeql.yml workflow
29 remaining items
don-petry commentedon Jun 5, 2026
Resolved! This check is now passing as of 2026-06-05. Closing automatically.
feat: implement issue #93 — Compliance: stray-codeql-workflow (#196)
ci: remove stray codeql.yml workflow (#125)
feat: implement issue #93 — Compliance: stray-codeql-workflow (#196)
feat: implement issue #301 — Compliance: non-stub-feature-ideation.yml (
feat: implement issue #93 — Compliance: stray-codeql-workflow (#196)
feat: implement issue #325 — Compliance: ruleset-drift-pr-quality-req…
feat: implement issue #93 — Compliance: stray-codeql-workflow (#196)
feat: implement issue #301 — Compliance: non-stub-feature-ideation.yml (
feat: implement issue #325 — Compliance: ruleset-drift-pr-quality-req…
feat: implement issue #400 — Compliance: ruleset-bypass-dependabot-co…