diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
index 3900739ee6..84a3175a76 100644
--- a/.github/codeql/codeql-config.yml
+++ b/.github/codeql/codeql-config.yml
@@ -13,12 +13,6 @@
 # the office_oxide C library is not installed, so this exclusion
 # brings CodeQL in line with the rest of the toolchain.
 paths-ignore:
-  - internal/ingestion/parser/doc_parser.go
-  - internal/ingestion/parser/docx_parser.go
-  - internal/ingestion/parser/ppt_parser.go
-  - internal/ingestion/parser/pptx_parser.go
-  - internal/ingestion/parser/xls_parser.go
-  - internal/ingestion/parser/xlsx_parser.go
   # Generated / vendored — also break analysis without adding signal.
   - "**/testdata/**"
   - "**/node_modules/**"
diff --git a/internal/storage/s3.go b/internal/storage/s3.go
index ccb0c4193b..cca3478841 100644
--- a/internal/storage/s3.go
+++ b/internal/storage/s3.go
@@ -84,10 +84,11 @@ func (s *S3Storage) connect(ctx context.Context) error {
 	}
 
 	// Create S3 client with custom endpoint if provided
-	clientOpts := []func(*s3.Options){}
+	var clientOpts []func(*s3.Options)
 	if s.config.EndpointURL != "" {
 		clientOpts = append(clientOpts, func(o *s3.Options) {
 			o.BaseEndpoint = aws.String(s.config.EndpointURL)
+			o.UsePathStyle = s.config.AddressingStyle == "path"
 		})
 	}