Several CI/CD workflow files have issues that should be cleaned up:
1. .github/workflows/greetings.yml — Placeholder messages
The first-interaction messages are still the default template text. Either customize them to something meaningful or remove the workflow entirely.
Current messages:
- Issue: "Message that will be displayed on users' first issue"
- PR: "Message that will be displayed on users' first pull request"
2. .github/workflows/codacy.yml — Deprecated upload-sarif action
Uses github/codeql-action/upload-sarif@v3 which is deprecated. Should be updated to @v4 to match the main CodeQL workflow.
Also, max-allowed-issues: 2147483647 effectively disables the CLI exit-code enforcement — consider lowering to a reasonable threshold.
3. .github/codeql-config.yml — Misattributed config
This config was created to suppress CSSLint alerts, but those alerts come from Codacy, not CodeQL. The file is unused since the CodeQL workflow doesn't generate CSSLint alerts. Either remove it or re-purpose it for actual CodeQL configuration needs.
Several CI/CD workflow files have issues that should be cleaned up:
1.
.github/workflows/greetings.yml— Placeholder messagesThe first-interaction messages are still the default template text. Either customize them to something meaningful or remove the workflow entirely.
Current messages:
2.
.github/workflows/codacy.yml— Deprecated upload-sarif actionUses
github/codeql-action/upload-sarif@v3which is deprecated. Should be updated to@v4to match the main CodeQL workflow.Also,
max-allowed-issues: 2147483647effectively disables the CLI exit-code enforcement — consider lowering to a reasonable threshold.3.
.github/codeql-config.yml— Misattributed configThis config was created to suppress CSSLint alerts, but those alerts come from Codacy, not CodeQL. The file is unused since the CodeQL workflow doesn't generate CSSLint alerts. Either remove it or re-purpose it for actual CodeQL configuration needs.