From 52b2915b9dda6c4041866ba400b3ba986d173193 Mon Sep 17 00:00:00 2001
From: Gianluca Mardente <gianluca.mardente@gmail.com>
Date: Sat, 11 Jul 2026 07:41:36 +0200
Subject: [PATCH] fix: replace codeql autobuild step with an explicit build
 step

---
 .github/workflows/codeql.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index e22e314..9383748 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -40,8 +40,11 @@ jobs:
       with:
         languages: ${{ matrix.language }}
 
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+    - name: Build
+      # Autobuild only traces packages reachable from a single detected entry point, missing
+      # cmd/main.go's sibling main package (test/fv/exec-plugin/main.go). Build the whole module
+      # explicitly so CodeQL sees every package.
+      run: go build ./...
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3