chore(autofix): reconcile #2170 with protected main after #2147 - #2189

Merged

seonghobae merged 12 commits into

test/autofix-required-opencode-coverage-rcafrom

Sep 14, 2026

Commits on Sep 13, 2026

fix(security-scan): use current OSV output flags and bind SARIF upload to the head checkout

seonghobae
and
claude
committed
109b114
fix(sast-semgrep): fold the changed-scope gate into its single consumer job

seonghobae
and
claude
committed
8db9a1d
docs(sast-semgrep): describe the step-level guard in the job comment

seonghobae
and
claude
committed
fb8138e
Merge remote-tracking branch 'origin/main' into fix/osv-output-flags-sarif-checkout-path-2132
seonghobae
committed
a808114
test(security-scan): assert each OSV step's output flag individually

seonghobae
and
claude
committed
7e5b971
fix(codeql): resolve SARIF rules from the referenced tool component

seonghobae
and
claude
committed
3452ed5
Merge remote-tracking branch 'origin/main' into fix/codeql-sarif-gate-extension-rules-2150
seonghobae
committed
9354280
Merge remote-tracking branch 'origin/main' into tmp-fix/osv-output-flags-sarif-checkout-path-2132
seonghobae
committed
79546dc
Merge remote-tracking branch 'origin/main' into tmp-fix/sast-semgrep-gate-fold-20260913
seonghobae
committed
aa52e2a

Commits on Sep 14, 2026