Skip to content

CodeQL as an advanced setup that reads .claude/mods - #10

Merged
evanwon merged 1 commit into
mainfrom
codeql-advanced-setup
Nov 3, 2026
Merged

evanwon merged 1 commit into
mainfrom
codeql-advanced-setup

Conversation

@evanwon

@evanwon evanwon commented Nov 3, 2026

Copy link
Copy Markdown
Owner

CodeQL's default setup here had stopped scanning: its only run (Oct 27) failed with "No JavaScript or TypeScript code found", because all the TypeScript is under .claude/mods and the JavaScript extractor skips dot-folders. Default setup can't be given a paths config, so it ended up configured with no languages and no schedule.

This adds an advanced setup that names .claude/mods and .github/workflows, on pushes to main, PRs and a weekly schedule. Default setup is turned off, since GitHub won't take an advanced setup's results while it's on.

🤖 Generated with Claude Code

Default setup found no code it could read, since the TypeScript is all under .claude/mods and the JavaScript extractor
skips dot-folders, so it had stopped scanning. This config names that folder and .github/workflows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@evanwon
evanwon merged commit 1511b28 into main Nov 3, 2026
2 checks passed
@evanwon
evanwon deleted the codeql-advanced-setup branch November 3, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants