Repository navigation
bug(security): py/command-line-injection CodeQL alert in terminal_websocket_manager — file no longer exists #3938
Description
Context
Issue #3205 (PR #3930) addressed CodeQL py/command-line-injection alerts. The agent found that one alert referenced terminal_websocket_manager which no longer exists in the codebase (deleted in a prior terminal consolidation PR).
Problem
CodeQL may still be reporting an alert for a file that was deleted. This could mean:
- The CodeQL baseline was not refreshed after the file was deleted
- A different file has the same alert and was misidentified in the issue description
Task
- Run CodeQL scan or check the GitHub Security tab for the current
py/command-line-injectionalerts - If the alert references a deleted file, dismiss it as "won't fix / code no longer exists"
- If a real alert remains in a live file, apply the appropriate suppression or fix
Discovered in
Session 77 while implementing #3205 (PR #3930). The agent could not suppress the alert because the referenced file does not exist.
Activity
fix(security): add CodeQL suppression for well-hardened xdotool comma…
Merge pull request #3965 from mrveiss/issue-3938
mrveiss commentedon Apr 8, 2026
✅ Completed in PR #3965 (commit 862da79) - terminal_websocket_manager file was deleted during prior terminal consolidation. CodeQL alert is stale.
chore: remove old issue worktree directories (#3205, #3938)