Default code-scanning setup was enabled via the API once the repo flipped
public (PR-merge sequence on 2026-05-13 at f6637ec3). With default setup
configured for Swift + JS/TS + actions + python languages, our custom
codeql.yml workflow can no longer upload SARIF (GitHub rejects with
"default setup is enabled" error). Removing the redundant workflow.
Default setup gives:
- CodeQL for Swift, JavaScript, TypeScript, GitHub Actions, Python
- "Default" query suite (less aggressive than security-extended; can
be tightened later via the API or repo Settings)
- Auto-scheduled scans on push/PR
- Zero workflow YAML to maintain
Loses (vs custom workflow):
- security-extended query suite. Re-enable via:
gh api -X PATCH /repos/KofTwentyTwo/Jarvis/code-scanning/default-setup \\
-f query_suite=security-extended
- Manual Swift build path. Default setup auto-detects builds.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
james.maesandClaude Opus 4.7