From c3c6ede95e0c326f9ff710fdced290f317141ced Mon Sep 17 00:00:00 2001
From: makan <makan.midyaty@gmail.com>
Date: Thu, 30 Jul 2026 16:54:05 +0300
Subject: [PATCH 1/2] chore: remove codeql workflow, replaced by default setup

---
 .github/workflows/codeql.yml | 36 ------------------------------------
 1 file changed, 36 deletions(-)
 delete mode 100644 .github/workflows/codeql.yml

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
deleted file mode 100644
index d3a2ce3..0000000
--- a/.github/workflows/codeql.yml
+++ /dev/null
@@ -1,36 +0,0 @@
-name: "codeql"
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  schedule:
-    - cron: '0 6 * * 1' # every Monday 06:00 UTC
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ['go']
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-go@v7
-        with:
-          go-version: stable
-
-      - uses: github/codeql-action/init@v3
-        with:
-          languages: ${{ matrix.language }}
-
-      - uses: github/codeql-action/analyze@v3

From 26e0f26aa6d3fcea361f46af36cc1588f0292cf3 Mon Sep 17 00:00:00 2001
From: makan <makan.midyaty@gmail.com>
Date: Thu, 30 Jul 2026 16:59:31 +0300
Subject: [PATCH 2/2] fix: run build on push to any branch so required status
 check fires on PRs

---
 .github/workflows/build.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e6127e5..df1b133 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -2,7 +2,6 @@ name: build
 
 on:
   push:
-    branches: [main]
   pull_request:
 
 permissions:
@@ -33,7 +32,7 @@ jobs:
     # Only pushes to main publish, so pull request runs never receive a token
     # with packages: write — a branch PR can change this workflow and its code
     # runs with whatever permissions the run was granted.
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     needs: test
     runs-on: ubuntu-latest
     permissions: