From 2df103e2b35d6fccac7fe1cb07754474c50c48e1 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 4 Sep 2026 23:51:48 +0900 Subject: [PATCH] ci(actions): remove redundant local CodeQL marker Signed-off-by: Seongho Bae Commit-Message-Assisted-by: Claude (via Claude Code) --- .github/workflows/codeql.yml | 35 ----------------------------------- CLAUDE.md | 2 +- 2 files changed, 1 insertion(+), 36 deletions(-) delete mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml deleted file mode 100644 index f561f69..0000000 --- a/.github/workflows/codeql.yml +++ /dev/null @@ -1,35 +0,0 @@ -name: CodeQL Default Setup Marker - -on: - workflow_dispatch: - -permissions: - contents: read - -jobs: - default-setup-owned: - name: Default setup owns CodeQL uploads - runs-on: ubuntu-latest - steps: - - name: Explain CodeQL ownership - run: | - echo "GitHub CodeQL default setup or central required checks own SARIF uploads for this repository." - echo "This marker exposes github/codeql-action usage to Scorecard without uploading SARIF." - - - name: Checkout repository for manual diagnostics - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - - name: Initialize CodeQL for manual diagnostics - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 - with: - languages: javascript-typescript - - - name: Finish without uploading SARIF - run: | - echo "Skipping github/codeql-action/analyze because central/default setup owns SARIF upload." - - - name: Document advanced CodeQL analyze action without running it - if: ${{ false }} - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 - with: - category: "/language:javascript-typescript" diff --git a/CLAUDE.md b/CLAUDE.md index d342517..93be1f1 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -16,7 +16,7 @@ python3 -m http.server 4173 # and check the console — success prints "ALL_TESTS_PASSED_SUCCESSFULLY" ``` -There is no lint/build/deploy command. Deployment is automatic: pushing to `main` updates the live site. CI is limited to GitHub's CodeQL default setup (`.github/workflows/codeql.yml` is only a marker workflow), Dependabot for GitHub Actions, and a ClusterFuzzLite marker Dockerfile. +There is no lint/build/deploy command. Deployment is automatic: pushing to `main` updates the live site. CI is limited to the central required workflows, GitHub's CodeQL default setup, Dependabot for GitHub Actions, and a ClusterFuzzLite marker Dockerfile. ## Architecture