[sbaum1994]

TL;DR

Backport #2905 to release-deploy/stacks/nvcf-compute-plane/v1.0 so maintenance-only source changes receive the existing CodeQL analysis.

Additional Details

• Adds the existing maintenance branch patterns to PR/push filters.
• Eligible PRs retain buildless Rust/Java analysis; Go stays on eligible pushes. Findings remain advisory.
• The weekly scan remains on the default branch. Path filters and job commands are unchanged.
• This only updates the workflow and can merge independently of ci(codeql): scan maintenance branches #2905.

For the Reviewer

The diff contains only the CodeQL branch filters and matching comments.

For QA

Actionlint and whitespace checks passed on this maintenance base. No application tests or runtime QA are needed for a CI-only backport. No dependencies, licenses, or NOTICE changes.

Issues

Relates to #2903. Main and both active-train backports are tracked there.

Checklist

• Contributing Guidelines reviewed.
• Commit signed off for DCO.
• Workflow validation covers the change.
• Workflow guidance is current.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 1

• main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: NVIDIA/nvcf
• Branch: sbaum1994/maintenance-codeql-compute-plane-1-0
• File: .coderabbit.yaml
• Commit: a784958
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Enterprise
• Run ID: acd6284f-17d4-4895-8536-bc5275585064

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🛡️ CodeQL Analysis

🚨 Found 11 issue(s)

Severity Breakdown:

• 🔴 Errors: 0
• 🟡 Warnings: 0
• 🔵 Notes: 0

📋 Top Issues

🔗 View full details in Security tab

_{🕐 Last updated: 2026-10-26 14:55:27 UTC | Commit: a784958}