Skip to content

Harden corpus packing and graph bundle ingress#2

Merged
apstenku123 merged 6 commits into
mainfrom
codex/review-baseline-20260713
Jul 13, 2026
Merged

Harden corpus packing and graph bundle ingress#2
apstenku123 merged 6 commits into
mainfrom
codex/review-baseline-20260713

fix: bootstrap sidecar audit from a clean checkout

8a8de80
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Jul 13, 2026 in 3s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 42 in .github/workflows/ci-self-hosted.yml

See this annotation in the file changed.

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Check warning on line 67 in .github/workflows/ci-self-hosted.yml

See this annotation in the file changed.

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}