Hi,
  
This is a false positive. The @v3 flagged by patchtest is from a verbatim upstream git log entry:
  
  8e31cd254be3 github: bump codeql version to @v3
  
It refers to a GitHub Actions version tag (actions/codeql-action@v3), not a GitHub username mention.
 
I'd prefer to keep the upstream log intact rather than modify it.
  
Happy to resend with the @ stripped if maintainers prefer, but wanted to flag this as a patchtest false positive that might be worth addressing in the test itself.
  
Thanks,
Jaipaul