Skip to content

Commit 68c5805

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the beta-Rust CodeQL leg (was cancelled/hanging), keep actions
The CodeQL matrix analysed `actions` + `rust`. CodeQL's Rust support is beta: that leg cancels/hangs and never resolves (the recurring "CodeQL checks 2 things forever" symptom), providing zero real coverage. Removing it leaves the `actions` leg (this repo's primary analysable surface, per the workflow's own comment), so the matrix stays non-empty (no zero-jobs startup_failure). Rust security should be covered natively instead: rust.yml already runs clippy + build + test. A cargo-audit gate is a recommended follow-up — verified locally that `cargo audit` runs and already flags a real vuln in shared-context (crossbeam-epoch 0.9.18 → RUSTSEC-2026-0204, fix >=0.9.20; anyhow 1.0.102 unsound RUSTSEC-2026-0190). Verified: actionlint exit 0; matrix has 1 `actions` leg, 0 active `rust` legs. Part of the estate-wide CI cleanup: 13 repos carry this beta-Rust CodeQL leg. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
1 parent 5804afd commit 68c5805

1 file changed

Lines changed: 0 additions & 2 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,8 +38,6 @@ jobs:
3838
# the prior matrix as containing no language present in the repo.
3939
- language: actions
4040
build-mode: none
41-
- language: rust
42-
build-mode: none
4341

4442
steps:
4543
- name: Checkout

0 commit comments

Comments
 (0)