From ad09ed1b2cb5e368abdbc87ec9a3072f86961dd4 Mon Sep 17 00:00:00 2001
From: Nathan Oyler <notque@gmail.com>
Date: Thu, 7 May 2026 05:18:20 -0700
Subject: [PATCH] ci: remove CodeQL workflow and fix Checks workflow

- Remove CodeQL workflow (requires code scanning enabled; works automatically
  when repo goes public)
- Remove check-dependency-licenses and check-addlicense steps (targets don't
  exist in Makefile)
- Remove shellcheck step (no shell scripts in repo)
- Add SPDX headers to README.md and CONTRIBUTING.md for REUSE compliance
- Add build/** and .claude/** to REUSE.toml annotations
---
 .github/workflows/checks.yaml |  8 -------
 .github/workflows/codeql.yaml | 44 -----------------------------------
 CONTRIBUTING.md               |  5 ++++
 README.md                     |  5 ++++
 REUSE.toml                    |  8 +++++++
 5 files changed, 18 insertions(+), 52 deletions(-)
 delete mode 100644 .github/workflows/codeql.yaml

diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 4781c12..bbb58f5 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -34,18 +34,10 @@ jobs:
         uses: golangci/golangci-lint-action@v9
         with:
           version: latest
-      - name: Delete pre-installed shellcheck
-        run: sudo rm -f "$(which shellcheck)"
-      - name: Run shellcheck
-        run: make run-shellcheck
-      - name: Dependency Licenses Review
-        run: make check-dependency-licenses
       - name: Check for spelling errors
         uses: crate-ci/typos@v1
         env:
           CLICOLOR: "1"
-      - name: Check if source code files have license header
-        run: make check-addlicense
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v6
       - name: Install govulncheck
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
deleted file mode 100644
index b0bb5d3..0000000
--- a/.github/workflows/codeql.yaml
+++ /dev/null
@@ -1,44 +0,0 @@
-################################################################################
-# This file is AUTOGENERATED with <https://github.com/sapcc/go-makefile-maker> #
-# Edit Makefile.maker.yaml instead.                                            #
-################################################################################
-
-# SPDX-FileCopyrightText: 2024 SAP SE or an SAP affiliate company
-# SPDX-License-Identifier: Apache-2.0
-
-name: CodeQL
-"on":
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-  schedule:
-    - cron: '00 07 * * 1'
-  workflow_dispatch: {}
-permissions:
-  actions: read
-  contents: read
-  security-events: write
-jobs:
-  analyze:
-    name: CodeQL
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          check-latest: true
-          go-version: 1.26.2
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
-        with:
-          languages: go
-          queries: security-extended
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v4
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 8148c67..91aff24 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,3 +1,8 @@
+<!--
+SPDX-FileCopyrightText: 2024 SAP SE or an SAP affiliate company
+SPDX-License-Identifier: Apache-2.0
+-->
+
 # Contributing to openstack-mcp-server
 
 Thank you for your interest in contributing to the OpenStack MCP Server!
diff --git a/README.md b/README.md
index 9f985e4..ecd0629 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,8 @@
+<!--
+SPDX-FileCopyrightText: 2024 SAP SE or an SAP affiliate company
+SPDX-License-Identifier: Apache-2.0
+-->
+
 # openstack-mcp-server
 
 MCP (Model Context Protocol) server for OpenStack and SAP Converged Cloud. Provides AI coding agents with typed, structured tools for querying infrastructure — 55 tools across 18 services.
diff --git a/REUSE.toml b/REUSE.toml
index 519d6e0..6181994 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -24,3 +24,11 @@ path = [
 ]
 SPDX-FileCopyrightText = "SAP SE or an SAP affiliate company"
 SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = [
+  "build/**",
+  ".claude/**",
+]
+SPDX-FileCopyrightText = "SAP SE or an SAP affiliate company"
+SPDX-License-Identifier = "Apache-2.0"