Skip to content

test: verify required security summary blocks a failed aggregate (do not merge) - #47

Closed
PiesP wants to merge 1 commit into
masterfrom
codex/issue-44-summary-negative-control
Closed

PiesP wants to merge 1 commit into
masterfrom
codex/issue-44-summary-negative-control

Conversation

@PiesP

@PiesP PiesP commented Oct 8, 2026 •

Copy link
Copy Markdown
Owner

Validation-only negative control for issue #44, authorized by the repository owner. Closed without merging after protection acceptance.

At exact head ea04c41 against current strict base b098ded, GitHub Actions App 15368 returned success for quality, OSV Vulnerability Scan (PR Diff), and Static Analysis (Semgrep), while Security scan summary failed. CodeQL Analysis also succeeded; Full OSV was inapplicable on this PR. The summary's actual error was Expected OSV PR diff to succeed for pull_request, got: failure.

The PR remained MERGEABLE in Git terms but BLOCKED by branch protection. No merge was attempted. CI run: https://github.com/PiesP/browser-core/actions/runs/37844911955 (success); Security run: https://github.com/PiesP/browser-core/actions/runs/37844912025 (expected summary failure). Live protection requires all four checks from App 15368 with strict/admin enforcement unchanged.

This one-line control supplies literal failure to the immutable summary helper; it proves aggregate enforcement, not an actual CodeQL finding. The change passed 42 local workflow/execution tests and actionlint. It is intentionally excluded from master.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-08T21:13:03.329302Z ea04c41 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant