[hyperpolymath]

Depends on: #203

Summary

This pull request is stacked on #203. Its base is the branch of #203, so the diff shows only this change. Merge #203 first.

After #203, the CodeQL caller scans the Rust code. The 29 workflow files of this repository have no CodeQL scan. gitbot-fleet scans its workflow files with language: actions. This pull request adds the same scan here.

Changes

• .github/workflows/codeql.yml: a second job, analyze-actions. It calls the same reusable workflow as the job analyze, at the same pinned commit (740c9d7), with language: actions and the same permissions.
• 1 comment line in the header of the file.

The called workflow takes 1 language for each call. Its header shows this form for more than 1 language: 1 job for each language.

Testing

• yq reads the file: 2 jobs, analyze with rust and analyze-actions with actions, each with the same uses: value.
• The called workflow at 740c9d7 passes the language to languages: and sets the result category to /language:<name>. So the 2 jobs do not write to the same category.

Not verified:

• A real run. Like the other callers, this job starts only when the Actions settings of this repository permit reusable workflows from metadatastician/standards. The first scan can show findings in the workflow files.

---

Generated by Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 3a87bc7b-f8b2-4f92-b9f5-52060a349483

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[chatgpt-codex-connector]

Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	❌ Failed 2026-11-10T20:04:00.541624Z We couldn’t complete this review. Comment @codex review to try again.	68d8ab3	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.