4 commits

Author	SHA1	Message	Date
Kelsi	3cd360e8d6	chore(ci): exclude extern/ from CodeQL and Semgrep scanning ... All 61 open CodeQL alerts were in vendored third-party libraries (ImGui, miniaudio, stb_*). We do not modify upstream code, so these findings drown out signal in our own code without being actionable.	2026-05-14 11:33:26 -07:00
Kelsi	208fe0e7e3	Suppress cpp/weak-cryptographic-algorithm via query-filter (protocol-mandated RC4)	2026-02-19 17:49:49 -08:00
Kelsi	c69457ae3b	apply pending protocol, ui, audio, and CodeQL fixes	2026-02-19 16:17:06 -08:00
Kelsi	586fb88c5f	docs+security: sync controls and scope Warden RC4 CodeQL exception	2026-02-19 15:54:35 -08:00