ci: scan issue and comment bodies — this repo has never scanned one - #27

Open

yakimoto wants to merge 11 commits into

mainfrom

ci/1747-public-repo-guard-body-scan

Commits on Aug 6, 2026

ci: this repo's public-repo-guard never scanned a single issue or comment body

yakimoto
and
claude
committed
209e63c
fix(ci): scope body-policy allowlists and guarantee a PCRE2 ripgrep

yakimoto
and
codesmith-bot
committed
8234983
ci: scan review bodies, fix install list, use synthetic fixture repo names

yakimoto
and
codesmith-bot
committed
9219dd8
fix(ci): run the tree scan on PR edits so a skipped check can't supersede a failing one

yakimoto
and
codesmith-bot
committed
45fa1b4
test: split private-key fixture literal so the foundation-gate secret scan cannot match it

yakimoto
and
codesmith-bot
committed
9bac94c
fix: drop the stray word boundary so compound credential names match after the repo name

yakimoto
and
codesmith-bot
committed
ee35c9e
docs: state precisely what per-job concurrency does and does not fix for the tree job

yakimoto
and
codesmith-bot
committed
e3a4265
fix: key the body-guard group on the comment/review id first so batched review comments are all scanned

yakimoto
and
codesmith-bot
committed
5d9db11
fix(ci): close two body-guard pass-by-default paths

yakimoto
and
codesmith-bot
committed
7e086ee
ci: skip tree scan for review events on closed PRs

yakimoto
and
codesmith-bot
committed
f2f50d7
fix(ci): skip body scan for review events on closed PRs

yakimoto
and
codesmith-bot
committed
c284c89