test: force-validate CodeQL severity gate (DO NOT MERGE)#1

Closed

norandom wants to merge 8 commits into

mainfrom

throwaway/codeql-gate-force-test

Commits on May 14, 2026

test(throwaway): force-validate CodeQL severity gate (DO NOT MERGE)

norandom
and
claude
committed
test(throwaway): remove build tag so CodeQL autobuild sees the sink

norandom
and
claude
committed
test(throwaway): use HTTP-derived taint source (canonical CodeQL pattern)

norandom
and
claude
committed
Merge branch 'main' into throwaway/codeql-gate-force-test
norandom
committed
fix(scan): null-safe ruleIndex lookup in severity gate

norandom
and
claude
committed
debug(scan): print SARIF shape before gate to diagnose the 0-count mismatch
norandom
committed
debug(scan): probe result.rule and extensions for severity location
norandom
committed
fix(scan): look up severity in tool.extensions[].rules (CodeQL Action SARIF shape)

norandom
and
claude
committed