No concurrency control
Part of Architecture & Best Practices, which counts for 15% of the overall score. When this check fires it deducts 4 points from that category, once per scan, no matter how many places it turns up.
What it detects
The workflow declares no concurrency group, so rapid pushes or repeated pull-request updates start overlapping runs that all continue to completion. That wastes runner minutes and, for deploy workflows, can race. This is a heuristic best-practice flag.
Why it matters
Without a concurrency group, every push or pull-request update starts a fresh run and all of them run to completion. On an active branch that means stacked, redundant runs competing for runner minutes, and for deploy workflows it can mean two deployments racing. This is a heuristic best-practice flag.
How to fix it
Add a concurrency block keyed to the ref, for example concurrency: group: ${{ github.workflow }}-${{ github.ref }} with cancel-in-progress: true, so a new run supersedes an in-progress one on the same ref. For deploy workflows to a shared environment, key on the environment and leave cancel-in-progress off if a deploy must not be interrupted mid-flight.
The paid report includes a ready-to-paste prompt for your AI coding agent for every check it finds, pointed at the exact findings from your scan. See pricing
Does your repo trip this check?
Paste a GitHub URL or drop a project folder. Scans run in your browser and take seconds.
Scan your repo