ci(actions): remove redundant local CodeQL marker - #208
Conversation
Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code)
|
Warning Review limit reachedNext included review available in 17 minutes. View limit detailsLimit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Review configuration: ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Team Run ID: 📒 Files selected for processing (2)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2df103e2b3
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - name: Explain CodeQL ownership | ||
| run: | | ||
| echo "GitHub CodeQL default setup or central required checks own SARIF uploads for this repository." | ||
| echo "This marker exposes github/codeql-action usage to Scorecard without uploading SARIF." |
There was a problem hiding this comment.
For consumers that assess SAST coverage from repository-visible workflow configuration, this removes the only github/codeql-action reference: a repo-wide search finds no replacement workflow, while this line explicitly documents that the marker exists to expose CodeQL usage to Scorecard. The central required workflow and default setup may continue scanning, but they are not committed here, so deleting the marker can regress the repository's public Scorecard evidence; retain it or add another supported, checked-in signal.
Useful? React with 👍 / 👎.
1 participant
변경
Static site tests,reconcile-current-mainregistry를 비활성화했습니다.검증
actionlint: 통과(대상 0개)git diff --check: 통과범위
Pages publish/deploy/release, 제품 HTML/CSS/JavaScript, automation은 변경하지 않았습니다.