chore(codemod): Added comment about ignoring CodeQL alert

https://github.com/mlaursen/react-md/pull/1285/checks\?check_run_id\=4316777905
mlaursen · Nov 24, 2021 · 631d56c · 631d56c
1 parent 98a6a9f
commit 631d56c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/packages/codemod/rmd-codemod.ts b/packages/codemod/rmd-codemod.ts
@@ -128,6 +128,8 @@ async function handleAction(options: Options): Promise<void> {
   // prefix with `node` because of a bug around: "env: node\r"
   const command = `node ${jscodeshiftExecutable} ${args.join(" ")}`;
   console.log(command);
+  // react-codemod does it... so I'll ignore the security issue fo rnow.
+  // https://github.com/reactjs/react-codemod/blob/b34b92a1f0b8ad333efe5effb50d17d46d66588b/bin/cli.js
   execSync(command, { stdio: "inherit" });
 }