Apply suggestions from code review

Co-authored-by: Copilot <[email protected]>

Author: david-wiggs

index.js

@@ -639,15 +639,15 @@ module.exports = (robot, { getRouter }, Settings = require('./lib/settings')) =>
 
   robot.on('workflow_run.completed', async context => {
     const { payload } = context
-    const { workflow_run, sender } = payload
+    const { workflow_run } = payload
 
     robot.log.debug(`Workflow run completed: ${workflow_run.name} in ${payload.repository.name}`)
 
     // Check if this is a Code Scanning Default Setup workflow
     // These workflows have a specific path pattern
     if (workflow_run.path === 'dynamic/github-code-scanning/codeql') {
       robot.log.debug(`Code Scanning Default Setup workflow detected for ${payload.repository.name}`)
-      
+
       // Trigger sync to validate code scanning configuration
       return syncSettings(false, context)
     }

lib/plugins/code_scanning.js

@@ -1,8 +1,6 @@
 const ErrorStash = require('./errorStash')
 const NopCommand = require('../nopcommand')
-const MergeDeep = require('../mergeDeep')
 
-const ignorableFields = []
 
 /**
  * Code Scanning plugin to manage GitHub Code Scanning Default Setup configuration
@@ -184,8 +182,8 @@ module.exports = class CodeScanning extends ErrorStash {
       if (normalizedAllowed.length > 0 && !normalizedAllowed.includes(lang)) {
         unauthorizedLanguages.push(lang)
       }
-      // If language is in blocked list
-      if (normalizedBlocked.includes(lang)) {
+      // If language is in blocked list (but not already added above)
+      else if (normalizedBlocked.includes(lang)) {
         unauthorizedLanguages.push(lang)
       }
     }