From ac98d71ba57c22fdf288f1d91e277188f7f7b717 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 13 Jun 2026 17:43:36 +0000 Subject: [PATCH] fix(ci): add `language: actions` to codeql.yml matrix (WF020) CodeQL now also scans workflow YAML for CI/CD-specific weaknesses. Clears hypatia's own workflow_audit codeql_missing_actions_language finding -- the same WF020 fixed in empty-linter#22. Note: this finding recurs estate-wide (dozens of codeql.yml copies derive from a shared template). The canonical fix is once, upstream in the .git-private-farm template, then propagated; this is the in-repo fix for hypatia pending that. https://claude.ai/code/session_01EqEysvTPzPwhS9ZGY7EYdr --- .github/workflows/codeql.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 598983c3..2f352b3c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,6 +33,8 @@ jobs: include: - language: javascript-typescript build-mode: none + - language: actions + build-mode: none steps: - name: Checkout