Skip to content

ci(security): temporarily remove Codex from release scans - #4469

Merged
alangou merged 2 commits into
mainfrom
ci/4466-codex-release-advisory/alangou
Oct 13, 2026
Merged

alangou merged 2 commits into
mainfrom
ci/4466-codex-release-advisory/alangou

Conversation

@alangou

@alangou alangou commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Temporarily remove Codex Security from the release security scan because intermittent incomplete scans block pre-release publication. The standalone workflow remains available for manual investigation.

Related Issue

Closes #4466

The author has verified ADMIN access; the issue has no acceptance label.

Changes

  • Remove the Codex job and its unused inputs and secret from Security Scan and its release caller.
  • Update CI documentation and troubleshooting guidance. Other scanners, release qualification, publication and artifact handling retain their existing behavior.

Testing

  • Actionlint with ShellCheck and offline Zizmor pass for both changed workflows.
  • Qualification-summary tests, Markdown lint and git diff --check pass.
  • YAML comparison confirms all other scanner and release jobs are identical to the base revision.
  • Independent review found no regressions and passed 38 qualification scenarios covering stable/pre-release success and failed, cancelled or skipped required suites.
  • No live release was dispatched. This removes the automatic scan temporarily; it does not fix scanner reliability.

Checklist

  • Follows Conventional Commits.
  • Commits are signed off for DCO.

Signed-off-by: Adrien Langou <alangou@nvidia.com>
@copy-pr-bot

copy-pr-bot Bot commented Oct 13, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@github-actions

Copy link
Copy Markdown

Signed-off-by: Adrien Langou <alangou@nvidia.com>
@alangou alangou changed the title ci(security): temporarily make release Codex scans advisory ci(security): temporarily remove Codex from release scans Oct 13, 2026
@alangou

alangou commented Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

/ok to test 36a30a3

@alangou
alangou enabled auto-merge October 13, 2026 15:31
@alangou
alangou added this pull request to the merge queue Oct 13, 2026
Merged via the queue into main with commit dfb0f4f Oct 13, 2026
79 checks passed
@alangou
alangou deleted the ci/4466-codex-release-advisory/alangou branch October 13, 2026 15:57
matthewgrossman added a commit that referenced this pull request Oct 15, 2026
Codex Security no longer runs in release qualification (#4469), so the
stable release can't rely on a pre-release's Codex result and runs can't
be matched by its job name. Match dispatched runs by the qualification
artifact name instead.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: temporarily remove Codex Security from release scans

2 participants