Skip to content

Migrate to GitHub-managed CodeQL configuration#9

Merged
mroman-recurly merged 1 commit intomasterfrom
migrate-to-default-codeql-20260205-164940
Feb 5, 2026
Merged

Migrate to GitHub-managed CodeQL configuration#9
mroman-recurly merged 1 commit intomasterfrom
migrate-to-default-codeql-20260205-164940

Conversation

@recurly-bearley
Copy link
Contributor

Related Items (JIRA/Sentry Issue/PR): https://recurly.atlassian.net/browse/APPSEC-908

Description:
This PR migrates from advanced CodeQL setup to GitHub's default managed CodeQL configuration.

GitHub now provides a managed default setup for CodeQL that automatically:

  • Detects languages in the repository
  • Applies recommended query suites
  • Keeps analysis up-to-date with GitHub's latest improvements

Changes:

  • Removed custom CodeQL workflow files
  • Removed custom CodeQL configuration file

After merging, CodeQL default setup needs to be enabled in the repository settings under Code security and analysis.

Screenshots: None

Testing:
This PR is the test. CodeQL will be re-enabled using GitHub's managed default setup after merge.

Deployment Instructions:
After merge, enable CodeQL default setup in repository Settings → Code security and analysis.

Rollback Commands:
Revert this change.

Checklist:

  • Acceptance criteria reviewed and met
  • Code manually tested locally
  • Tests added/updated and passing
  • Self-reviewed for obvious issues

Remove advanced CodeQL setup in favor of GitHub's default managed configuration.

This change:
- Removes custom CodeQL workflow files
- Removes custom CodeQL configuration
- Allows GitHub to manage CodeQL setup with recommended defaults

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Copy link
Contributor

@mroman-recurly mroman-recurly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mroman-recurly mroman-recurly merged commit 82d3109 into master Feb 5, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants