[PR] ci: Report more CodeQL findings [mynewt-newt]

["sjanc (via GitHub)" <gi...@apache.org>]

sjanc opened a new pull request, #649:
URL: https://github.com/apache/mynewt-newt/pull/649

   Run the security-and-quality query suite instead of the default one, which only has a small set of high precision security queries.
   
   Enable the local threat model so command line arguments, environment variables, files and stdin are treated as untrusted input. With only the default remote sources the taint tracking queries have nothing to start from in a command line tool.
   
   Build manually with go build instead of autobuild, which would pick up the Makefile meant for deb packaging and build through build.sh.
   
   Assisted-by: Claude:claude-opus-5-5


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@mynewt.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] ci: Report more CodeQL findings [mynewt-newt]

["sjanc (via GitHub)" <gi...@apache.org>]

sjanc merged PR #649:
URL: https://github.com/apache/mynewt-newt/pull/649


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@mynewt.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org