From c1f503d1d60d9fed98dbf28499524b69144fd228 Mon Sep 17 00:00:00 2001 From: Michael Suchacz <203725896+ibetitsmike@users.noreply.github.com> Date: Thu, 3 Sep 2026 16:28:29 +0000 Subject: [PATCH 1/2] Ignore Codex's review-summary status card in the Codex Comments gate Codex now posts a codex-pull-request-review-summary status comment when a PR opens. It is not a finding, but check_codex_comments.sh counted it as an unminimized bot comment and failed the Codex Comments check on every new PR. --- scripts/check_codex_comments.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/check_codex_comments.sh b/scripts/check_codex_comments.sh index 20af90f4986..96772536ba4 100755 --- a/scripts/check_codex_comments.sh +++ b/scripts/check_codex_comments.sh @@ -85,7 +85,7 @@ compute_codex_sets_from_arrays() { # "Argument list too long". printf is a shell builtin, so it has no such limit. REGULAR_COMMENTS=$(printf '%s' "$comments_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[ .[] - | select(.author.login == $bot and .isMinimized == false and (.body | test("Didn.t find any major issues|usage limits have been reached|create a Codex account") | not)) + | select(.author.login == $bot and .isMinimized == false and (.body | test("Didn.t find any major issues|usage limits have been reached|create a Codex account|codex-pull-request-review-summary|No security issues were found") | not)) ]') UNRESOLVED_THREADS=$(printf '%s' "$threads_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[ From d42cdcdc6f7eaeb41926000f015eb7a7e7b6db8b Mon Sep 17 00:00:00 2001 From: Michael Suchacz <203725896+ibetitsmike@users.noreply.github.com> Date: Thu, 3 Sep 2026 16:37:01 +0000 Subject: [PATCH 2/2] Anchor the Codex status-card exemptions to the exact card openings An unanchored "No security issues were found" would also drop a comment that carries real findings alongside that phrase. --- scripts/check_codex_comments.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/check_codex_comments.sh b/scripts/check_codex_comments.sh index 96772536ba4..949e5b26f29 100755 --- a/scripts/check_codex_comments.sh +++ b/scripts/check_codex_comments.sh @@ -85,7 +85,7 @@ compute_codex_sets_from_arrays() { # "Argument list too long". printf is a shell builtin, so it has no such limit. REGULAR_COMMENTS=$(printf '%s' "$comments_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[ .[] - | select(.author.login == $bot and .isMinimized == false and (.body | test("Didn.t find any major issues|usage limits have been reached|create a Codex account|codex-pull-request-review-summary|No security issues were found") | not)) + | select(.author.login == $bot and .isMinimized == false and (.body | test("Didn.t find any major issues|usage limits have been reached|create a Codex account|^|^Security review completed[.] No security issues were found in this pull request[.]") | not)) ]') UNRESOLVED_THREADS=$(printf '%s' "$threads_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[