[mjnitz02]

This repository is public. Do not put here any private DataRobot or customer's data: code, datasets, model artifacts, .etc.

Summary

Rationale

---

Note

Low Risk
Only adds GitHub Actions workflows; no application or runtime code changes, with auto-merge limited to Dependabot and gated by existing branch rules.

Overview
Adds CodeQL static analysis on pull requests, pushes to main, a weekly Monday schedule, and manual runs. It scans GitHub Actions workflows and Python with security-extended queries (no build step), uploads results to GitHub Security, and uses concurrency limits so in-flight PR runs cancel when updated.

Adds a Dependabot auto-merge workflow that, for PRs opened by dependabot[bot], calls gh pr merge --auto --squash so GitHub merges only after branch protection (required checks and reviews) pass. It does not check out the PR branch—only the preinstalled gh CLI runs with elevated contents / pull-requests permissions.

^{Reviewed by Cursor Bugbot for commit 08b7455. Configure here.}

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.