chore(ci): document CodeQL exclusion for .github-private (INFRA-49) (#4)

This commit is contained in:
Adam Moussa 2026-07-06 18:26:47 -04:00 • committed by GitHub
parent e6b05e1c6a
commit a070b36197
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

18
SECURITY.md Normal file
View file

@ -0,0 +1,18 @@
# Security
## CodeQL Analysis
CodeQL code scanning is intentionally not configured for this repository.
This repo contains only the Sea Haven Industries organization profile
(`profile/README.md`) rendered to org members. It holds no CodeQL-analyzable
application code in any supported language (no JavaScript/TypeScript, Python,
Go, Java, C/C++, C#, Ruby, or Swift), so CodeQL would have nothing to scan.
This exclusion is deliberate and tracked under INFRA-49. If analyzable
application code is ever added here, wire in the org reusable CodeQL workflow
(as used by the application repos) at that time.
## Reporting
For security concerns, contact Adam Moussa (adam@seahavenind.com).