From f1928c421cfd3a244b86d98718bdf547eb1059f5 Mon Sep 17 00:00:00 2001
From: AIOSAI <aipass.system@gmail.com>
Date: Thu, 14 May 2026 00:25:47 -0700
Subject: [PATCH] fix: suppress CodeQL false positive in dev_pr_handler (gh CLI
 output, not user input)

---
 src/aipass/drone/apps/handlers/git/dev_pr_handler.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/aipass/drone/apps/handlers/git/dev_pr_handler.py b/src/aipass/drone/apps/handlers/git/dev_pr_handler.py
index ad7369aa..d86ce46a 100644
--- a/src/aipass/drone/apps/handlers/git/dev_pr_handler.py
+++ b/src/aipass/drone/apps/handlers/git/dev_pr_handler.py
@@ -79,6 +79,7 @@ def create_dev_pr(description: str) -> dict:
         if "already exists" in stderr:
             existing_url = ""
             for line in stderr.splitlines():
+                # codeql[py/incomplete-url-substring-sanitization]
                 if "github.com" in line:
                     existing_url = line.strip()
                     break