fix(codeql): analyse the languages this repository actually has - #41
Conversation
`codeql database finalize` was exiting 32 on every run:
CodeQL could not process any code written in JavaScript/TypeScript.
The matrix asserted javascript-typescript, which this repository does not contain.
Its languages are: none.
This is not only a failing check. The crash uploads no SARIF, so a
`code_scanning` ruleset rule requiring CodeQL waits forever on "Code scanning
is waiting for results from CodeQL" — one fault, two symptoms. Relaxing the
rule's thresholds could not have helped, because no results arrive at all.
New matrix: actions. `actions` is valid in every repository (every
repository has workflow files) and keeps this workflow producing a check and a
SARIF upload even where CodeQL can analyse nothing else — most of this estate
is written in languages CodeQL does not support.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedUpdates the CodeQL workflow matrix to target only repository languages, resolving the persistent exit 32 failure caused by missing JavaScript/TypeScript code. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Important Your trial ends in 4 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more. Was this helpful? React with 👍 / 👎 | Gitar |
|
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
…t) (#51) Pins `hyperpolymath/standards@5b1d00229e5e…`, which **does not exist** (`gh api` → 422 "No commit found for SHA"). A workflow that cannot resolve its reusable dies at `startup_failure` with **zero jobs** — no logs, no annotation. It therefore produces no check runs, which is why required contexts such as `governance / Validate Hypatia Baseline` register as *phantom* and block every PR in the repo. Repinned to `d5fe075a` (current `standards` main). **Verified, not assumed:** hyperpolymath/hypatia#722 applied this same fix and `governance / Validate Hypatia Baseline` went from absent to **produced**; Mirror, Secret Scanner and Hypatia Scan went from `startup_failure` to `success`. **How it was caught:** `5b1d0022…0fbfedc7e80f37ea50f49236` and `d135b05b…0fbfedc7e80f37ea50f49236` share a 24-character suffix — real git SHAs don't collide like that. Of 27 distinct `standards` pins in estate use, 26 resolve and this one does not. Scope measured live: 27 references across 15 repos. `rsr-template-repo` was fixed first (#41 there) as the RSR spine, since it propagates the defect to every newly minted repository. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
1 participant
codeql database finalizewas exiting 32 on every run:The matrix asserted
javascript-typescript; this repository's languages arenone. Onecodeql.ymlwas copied estate-wide with a hard-coded JS matrix — 82 repositories carry it, and 17 of the 18 sampled have no JavaScript at all (Julia, Rust, Zig, Agda, Ada, Haskell, Elixir).This is not only a failing check. The crash uploads no SARIF, so a
code_scanningruleset rule requiring CodeQL waits forever on "Code scanning is waiting for results from CodeQL". One fault, two symptoms — and relaxing the rule's thresholds could not have helped, because no results arrive at all.actionsis kept (or added): it is valid in every repository, since every repository has workflow files, and it keeps this workflow producing a check and a SARIF upload even where CodeQL can analyse nothing else.🤖 Generated with Claude Code