From 1480acf34b5b800e2bfb7f1d2ccd97d119112836 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Przemys=C5=82aw=20K=C5=82ys?= <przemyslaw.klys@evotec.pl>
Date: Mon, 9 Feb 2026 11:41:29 +0100
Subject: [PATCH] CI: skip CodeQL while repo is private

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f8b94144c..8066e0d7e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -12,9 +12,9 @@ permissions:
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    # While the repo is private, prefer self-hosted runners to avoid GitHub-hosted spend limits.
-    # When public, use GitHub-hosted runners by default.
-    runs-on: ${{ fromJSON(github.event.repository.private && '["self-hosted","ubuntu"]' || '["ubuntu-latest"]') }}
+    # While the repo is private, Code Security may be disabled; skip CodeQL to avoid noisy failing checks.
+    if: ${{ !github.event.repository.private }}
+    runs-on: ubuntu-latest
     permissions:
       actions: read
       contents: read