From 40dd9191448cf3425874df232cbf41fc40b3181b Mon Sep 17 00:00:00 2001
From: Danyang Chen <cdy@recursive.bot>
Date: Wed, 14 Oct 2026 21:47:26 +0800
Subject: [PATCH] ci: turn off CodeQL (remove the workflow added in #29)

---
 .github/workflows/codeql.yml | 50 ------------------------------------
 1 file changed, 50 deletions(-)
 delete mode 100644 .github/workflows/codeql.yml

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
deleted file mode 100644
index 15700401..00000000
--- a/.github/workflows/codeql.yml
+++ /dev/null
@@ -1,50 +0,0 @@
-name: CodeQL
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  schedule:
-    # Weekly, Sunday 07:13 UTC (off-peak).
-    - cron: "13 7 * * 0"
-
-permissions: {}
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-jobs:
-  analyze:
-    name: Analyze (${{ matrix.language }})
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    permissions:
-      actions: read
-      contents: read
-      # Uploads results to the Security tab; works with GITHUB_TOKEN, no secrets.
-      security-events: write
-    strategy:
-      fail-fast: false
-      matrix:
-        # javascript-typescript: ds-bot and its plugins (no build step needed).
-        # actions: data-flow analysis of these workflows, complementing zizmor.
-        language: [javascript-typescript, actions]
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
-        with:
-          persist-credentials: false
-      - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2  # v4.38.2
-        with:
-          languages: ${{ matrix.language }}
-          build-mode: none
-          queries: security-and-quality
-          config: |
-            paths-ignore:
-              - ds-bot/client.js
-              - ds-bot/plugins/*/client.js
-              - "**/test/**"
-      - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2  # v4.38.2
-        with:
-          category: "/language:${{ matrix.language }}"