From c544867aa3f7cac7cf5e665d6fd2fc26c7c09b51 Mon Sep 17 00:00:00 2001 From: Ruslan Konviser Date: Fri, 2 Oct 2026 17:13:40 +0200 Subject: [PATCH] ci: skip the scheduled CodeQL run while default setup is on GitHub's default code scanning setup now scans this repository every week and refuses results uploaded by an advanced workflow. The workflow keeps its manual trigger for when default setup is switched off. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/codeql.yml | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 50d417d..8ccb56a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,8 +1,12 @@ name: CodeQL -# Weekly code scanning of the Rust API service and the TypeScript site, on GitHub-hosted runners. -# It runs once the repository is public (code scanning of a private repository needs a licence); -# until then every run is skipped. +# Code scanning of the Rust API service and the TypeScript site, on GitHub-hosted runners. +# +# The repository uses GitHub's default code scanning setup (Settings > Code security), which scans +# Rust, TypeScript and the workflows themselves every week. While default setup is on, GitHub +# refuses results uploaded by a workflow like this one, so the weekly schedule here is skipped and +# the job runs only when started by hand (after switching default setup off). Code scanning of a +# private repository needs a licence, so a private copy skips every run. on: schedule: - cron: "17 4 * * 1" @@ -14,7 +18,7 @@ permissions: jobs: analyze: name: analyze (${{ matrix.language }}) - if: ${{ !github.event.repository.private }} + if: ${{ !github.event.repository.private && github.event_name == 'workflow_dispatch' }} runs-on: ubuntu-latest timeout-minutes: 30 permissions: