Compliance: stray-codeql-workflow

[don-petry]

Compliance Finding

Category: ci-workflows
Severity: error
Check: stray-codeql-workflow

Detail

Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

Standard Reference

standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Weekly Compliance Audit (2026-04-09)

This finding is still open.

Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

[don-petry]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[don-petry]

Weekly Compliance Audit (2026-04-10)

This finding is still open.

Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup

[don-petry]

Claude finished @don-petry's task in 1m 7s —— View job • claude/issue-169-20260414-1138 • [Create PR ➔](https://github.com/petry-projects/google-app-scripts/compare/main...claude/issue-169-20260414-1138?quick_pull=1&title=Issue%20%23169%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23169%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

---

Tasks

• Analyze issue and gather context
• Delete .github/workflows/codeql.yml
• Commit and push changes
• Create pull request: petry-projects/google-app-scripts#188
• Self-review PR — single-file deletion, no logic changes, straightforward compliance fix
• Tag code owner (@don-petry) for review

Deleted .github/workflows/codeql.yml to comply with the org's CodeQL standard. CI checks are running; the change has no logic — just removes the stray workflow file that was causing duplicate CodeQL analysis alongside the GitHub-managed default setup.
| View PR #188

[don-petry]

Weekly Compliance Audit (2026-04-17)

This finding is still open.

Detail: Repo still ships .github/workflows/codeql.yml. The org standard now uses GitHub-managed CodeQL default setup; per-repo workflow files are drift and run a duplicate analysis alongside default setup. Delete the file. If a documented exception applies (custom query pack, build mode, path filters), open a standards PR against standards/ci-standards.md to record the exception before re-adding the workflow.

Standard: standards/ci-standards.md#2-codeql-analysis-github-managed-default-setup