Skip to content

๐Ÿ›ก๏ธ Sentinel: [์ •๋ณด ๋…ธ์ถœ ๋ฐฉ์ง€] ๊ฒ€์ƒ‰ ์—”์ง„ ์ธ๋ฑ์‹ฑ ๋ฐฉ์ง€ ๋ฉ”ํƒ€ ํƒœ๊ทธ ์ถ”๊ฐ€ - #254

Closed
seonghobae wants to merge 1 commit into
masterfrom
sentinel/add-robots-meta-tag-10466809194843970435
Closed

๐Ÿ›ก๏ธ Sentinel: [์ •๋ณด ๋…ธ์ถœ ๋ฐฉ์ง€] ๊ฒ€์ƒ‰ ์—”์ง„ ์ธ๋ฑ์‹ฑ ๋ฐฉ์ง€ ๋ฉ”ํƒ€ ํƒœ๊ทธ ์ถ”๊ฐ€#254
seonghobae wants to merge 1 commit into
masterfrom
sentinel/add-robots-meta-tag-10466809194843970435

Conversation

@seonghobae

Copy link
Copy Markdown
Collaborator

๐Ÿ’ก What:
์ƒ์„ฑ๋œ HTML ๋””๋ ‰ํ† ๋ฆฌ ๋ฆฌ์ŠคํŒ… ํŒŒ์ผ์˜ <head> ์„น์…˜์— <meta name="robots" content="noindex, nofollow"> ๋ฉ”ํƒ€ ํƒœ๊ทธ๋ฅผ ์ถ”๊ฐ€ํ–ˆ์Šต๋‹ˆ๋‹ค.

๐ŸŽฏ Why:
์ด ๋„๊ตฌ๋ฅผ ํ†ตํ•ด ์ƒ์„ฑ๋œ ์ •์  HTML ํŒŒ์ผ์ด ์™ธ๋ถ€ ์›น ์„œ๋ฒ„ ๋“ฑ์— ํ˜ธ์ŠคํŒ…๋  ๊ฒฝ์šฐ, ๊ฒ€์ƒ‰ ์—”์ง„ ํฌ๋กค๋Ÿฌ๊ฐ€ ํ•ด๋‹น ํŽ˜์ด์ง€๋ฅผ ์ธ๋ฑ์‹ฑํ•˜์—ฌ ๋‚ด๋ถ€ ๋””๋ ‰ํ† ๋ฆฌ ๊ตฌ์กฐ ๋ฐ ํŒŒ์ผ ๋ชฉ๋ก์ด ์™ธ๋ถ€์— ๋…ธ์ถœ๋  ์ˆ˜ ์žˆ๋Š” ์ •๋ณด ๋…ธ์ถœ(Information Exposure) ์ทจ์•ฝ์ ์„ ๋ฐฉ์–ดํ•˜๊ธฐ ์œ„ํ•จ์ž…๋‹ˆ๋‹ค. Defense in depth ๊ด€์ ์—์„œ ๊ธฐ๋ณธ์ ์œผ๋กœ ๋ด‡์˜ ์ ‘๊ทผ์„ ์ฐจ๋‹จํ•˜๋„๋ก ์„ค์ •ํ–ˆ์Šต๋‹ˆ๋‹ค.

โœ… Verification:

  • ๋กœ์ปฌ์—์„œ ./gradlew clean test jacocoTestReport jacocoTestCoverageVerification๋ฅผ ์‹คํ–‰ํ•˜์—ฌ ๋ชจ๋“  ํ…Œ์ŠคํŠธ ํ†ต๊ณผ ๋ฐ ์ฝ”๋“œ ์ปค๋ฒ„๋ฆฌ์ง€ 100% ์œ ์ง€๋ฅผ ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค.
  • ํ…Œ์ŠคํŠธ ์ฝ”๋“œ(MainTest.kt)์— ํ•ด๋‹น ๋ฉ”ํƒ€ ํƒœ๊ทธ๊ฐ€ ์ •์ƒ์ ์œผ๋กœ ํฌํ•จ๋˜์–ด ๋ Œ๋”๋ง๋˜๋Š”์ง€ ํ™•์ธํ•˜๋Š” ๋‹จ์–ธ๋ฌธ(assertion)์„ ์ถ”๊ฐ€ํ–ˆ์Šต๋‹ˆ๋‹ค.

PR created automatically by Jules for task 10466809194843970435 started by @seonghobae

Copilot AI review requested due to automatic review settings July 23, 2026 21:02
@google-labs-jules

Copy link
Copy Markdown

๐Ÿ‘‹ Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a ๐Ÿ‘€ emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.


For security, I will only act on instructions from the user who triggered this task.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a defensive <meta name="robots" content="noindex, nofollow"> tag to generated directory listing HTML to reduce the risk of search-engine indexing (and consequent information exposure) when the output is hosted.

Changes:

  • Inserted a robots meta tag in the generated HTML <head> alongside existing security-related meta tags.
  • Added a test assertion to ensure the robots meta tag is present in generated index.html.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
src/main/kotlin/html4tree/main.kt Adds the robots meta tag to the generated HTML head to discourage indexing/following.
src/test/kotlin/html4tree/MainTest.kt Extends testProcessDir to assert the robots meta tag is rendered.

๐Ÿ’ก Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode cannot approve yet because required coverage evidence did not pass.

Review outcome

1. HIGH .github/workflows/opencode-review.yml:1 - Coverage evidence did not prove required test/docstring evidence

  • Problem: The required coverage-evidence job result was failure, so OpenCode cannot establish approval sufficiency for this head.

  • Root cause: Automated approval is only valid when the same-head coverage-evidence job proves supported repository test suites passed and configured docstring gates passed or were advisory, or reports not applicable because no supported source files or package manifests exist. Missing, failed, skipped, unavailable, or unsupported-tooling test evidence is a blocker.

  • Fix: Install or configure the repository test/docstring evidence tooling when source files or package manifests exist, rerun the current-head coverage-evidence job, and approve only after it reports success with required evidence or explicit no-source not-applicable evidence.

  • Regression test: Keep the approval branch checking needs.coverage-evidence.result == success before posting APPROVE, and publish REQUEST_CHANGES when coverage-evidence blocker states such as cancelled, skipped, failed, unsupported-tooling, or below-100 evidence are present.

  • Result: REQUEST_CHANGES

  • Reason: coverage-evidence result was failure, so required test/docstring evidence was not proven for current head 50c0790c7d6be7ba4ba551b0b70cb03c72001ca2.

  • Head SHA: 50c0790c7d6be7ba4ba551b0b70cb03c72001ca2

  • Workflow run: 30424279178

  • Workflow attempt: 1

Coverage evidence

Coverage evidence job did not run or did not publish coverage evidence.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Changed file (2 files)"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Changed file (2 files)"]
  R1 --> V1["required checks"]
Loading

@opencode-agent

Copy link
Copy Markdown

OpenCode Review Overview

  • Head SHA: 50c0790c7d6be7ba4ba551b0b70cb03c72001ca2
  • Workflow run: 30424279178
  • Workflow attempt: 1
  • Gate result: REQUEST_CHANGES (approval step)

Pull request overview

OpenCode cannot approve yet because required coverage evidence did not pass.

Review outcome

1. HIGH .github/workflows/opencode-review.yml:1 - Coverage evidence did not prove required test/docstring evidence

  • Problem: The required coverage-evidence job result was failure, so OpenCode cannot establish approval sufficiency for this head.

  • Root cause: Automated approval is only valid when the same-head coverage-evidence job proves supported repository test suites passed and configured docstring gates passed or were advisory, or reports not applicable because no supported source files or package manifests exist. Missing, failed, skipped, unavailable, or unsupported-tooling test evidence is a blocker.

  • Fix: Install or configure the repository test/docstring evidence tooling when source files or package manifests exist, rerun the current-head coverage-evidence job, and approve only after it reports success with required evidence or explicit no-source not-applicable evidence.

  • Regression test: Keep the approval branch checking needs.coverage-evidence.result == success before posting APPROVE, and publish REQUEST_CHANGES when coverage-evidence blocker states such as cancelled, skipped, failed, unsupported-tooling, or below-100 evidence are present.

  • Result: REQUEST_CHANGES

  • Reason: coverage-evidence result was failure, so required test/docstring evidence was not proven for current head 50c0790c7d6be7ba4ba551b0b70cb03c72001ca2.

  • Head SHA: 50c0790c7d6be7ba4ba551b0b70cb03c72001ca2

  • Workflow run: 30424279178

  • Workflow attempt: 1

Coverage evidence

Coverage evidence job did not run or did not publish coverage evidence.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Changed file (2 files)"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Changed file (2 files)"]
  R1 --> V1["required checks"]
Loading

Copy link
Copy Markdown
Collaborator Author

Closing as superseded by draft canonical #349. The same robots directive is retained there with the correct boundary: cooperative search indexing guidance is not access control and requires a crawler to retrieve the page. #349 is blocked pending post-#363 update, current Google Search Central APA 7 doctoring, changelog, real generated-page tests, exact-head checks, and independent approval. No evidence from this duplicate head is reused.

@seonghobae seonghobae closed this Aug 5, 2026
@google-labs-jules

Copy link
Copy Markdown

Closing as superseded by draft canonical #349. The same robots directive is retained there with the correct boundary: cooperative search indexing guidance is not access control and requires a crawler to retrieve the page. #349 is blocked pending post-#363 update, current Google Search Central APA 7 doctoring, changelog, real generated-page tests, exact-head checks, and independent approval. No evidence from this duplicate head is reused.

Understood. Acknowledging that this work is now obsolete and stopping work on this task.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants