From 911a82532f6c0597997f9e5143c8e2d2e365b905 Mon Sep 17 00:00:00 2001
From: Tim Donohue <tim.donohue@lyrasis.org>
Date: Thu, 16 Jul 2026 16:23:48 -0500
Subject: [PATCH] Enable CodeQL code scanning for GitHub actions.  Remove
 autobuild step as that's only required for scanning compiled languages like
 Java.

---
 .github/workflows/codescan.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codescan.yml b/.github/workflows/codescan.yml
index 4a10eaf81e0..7e8f25a652e 100644
--- a/.github/workflows/codescan.yml
+++ b/.github/workflows/codescan.yml
@@ -42,11 +42,8 @@ jobs:
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:
-          languages: javascript
-
-      # Autobuild attempts to build any compiled languages
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+          # Codescan Javascript/Typescript code and GitHub actions/workflows
+          languages: javascript, actions
 
       # Perform GitHub Code Scanning.
       - name: Perform CodeQL Analysis