codeql-action icon indicating copy to clipboard operation
codeql-action copied to clipboard

Code scanning with GitHub Actions is not available for this repository.

Open blowdart opened this issue 1 month ago • 2 comments

When I look at the advanced security settings on https://github.com/blowdart/idunno.Bluesky I get a nice warning:

Code scanning with GitHub Actions is not available for this repository. GitHub Actions policy is limiting the use of some required actions. To use code scanning, allow actions from actions/* and github/codeql-action/* in your policy, or submit code scanning results externally using the API.

Except ... I have them listed in actions permissions

My permissions are as follows:

[X] Allow blowdart, and select non-blowdart, actions and reusable workflows [X] Allow actions created by GitHub [ ] Allow actions by marketplace verified creators

Allow or block specified actions and reusable workflows

EnricoMi/publish-unit-test-result-action@*,
actions/*,
azure/login@*,
danielpalme/ReportGenerator-GitHub-Action@*,
github/codeql-action/*,
irongut/CodeCoverageSummary@*,
marocchino/sticky-pull-request-comment@*,
nuget/login@*,
ossf/scorecard-action@*,
step-security/harden-runner@*,
test-summary/action@*,
zizmorcore/zizmor-action@*,

The CodeQL workflow runs perfectly fine but advanced security seems to think it doesn't run.

So, what's up with this? :)

blowdart avatar Nov 13 '25 19:11 blowdart

Hi @blowdart

After some internal discussion on this, it looks like it will be a bit difficult to help you here, as this is not related to the CodeQL action itself. Since you have a Pro account, you should be able to open a support ticket and get support that way. Would you mind following that route? The details on how to open an issue can be found here: https://docs.github.com/en/support/contacting-github-support/creating-a-support-ticket.

jketema avatar Nov 14 '25 10:11 jketema

Will do, thanks!

blowdart avatar Nov 14 '25 11:11 blowdart