From ab619a3cdf6d2ec54595d84075c995333d20c313 Mon Sep 17 00:00:00 2001
From: Chris Busillo <info@shinycomputers.com>
Date: Thu, 9 Jul 2026 20:29:32 -0400
Subject: [PATCH 1/2] Document CodeQL merge protection

---
 .github/github.json | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/.github/github.json b/.github/github.json
index 38fdb8d..159167e 100644
--- a/.github/github.json
+++ b/.github/github.json
@@ -59,11 +59,15 @@
     "Dependency Graph",
     "Dependabot Updates"
   ],
-  "requiredStatusChecks": [
-    "test",
-    "Analyze (actions)",
-    "Analyze (python)"
-  ],
+  "requiredStatusChecks": ["test"],
+  "codeScanningMergeProtection": {
+    "ruleset": "Require code scanning results",
+    "target": "defaultBranch",
+    "tool": "CodeQL",
+    "alertsThreshold": "errors",
+    "securityAlertsThreshold": "high_or_higher",
+    "dependabotDefaultSetupException": true
+  },
   "qaLabels": [],
   "deployLabels": [],
   "relatedRepos": [

From d5eb7bcab5c07cb40122a8a3130bde5591f1d673 Mon Sep 17 00:00:00 2001
From: Chris Busillo <info@shinycomputers.com>
Date: Thu, 9 Jul 2026 20:37:38 -0400
Subject: [PATCH 2/2] Remove redundant CodeQL target metadata

---
 .github/github.json | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/github.json b/.github/github.json
index 159167e..fc95ec8 100644
--- a/.github/github.json
+++ b/.github/github.json
@@ -62,7 +62,6 @@
   "requiredStatusChecks": ["test"],
   "codeScanningMergeProtection": {
     "ruleset": "Require code scanning results",
-    "target": "defaultBranch",
     "tool": "CodeQL",
     "alertsThreshold": "errors",
     "securityAlertsThreshold": "high_or_higher",