fix(ci): semgrep, cov-comment, buf-break-no-fail (#15)

fix(ci): semgrep, cov-comment, buf-break-no-fail (#15) #102