The security.yml CodeQL job fails because: 1. The Rust project is in apps/scraper/, not at the repo root 2. CodeQL v4's autobuilder can't find Cargo.toml at the root 3. CodeQL v4 requires the Rust code to be built for analysis Also removes javascript-typescript language since this repo has no JS/TS code.