add ripgrep to codex+gitlab cookbook

[pap-openai]

adding ripgrep dependency to make codex job execution faster/better

[dylan-hurd-oai]

@pap-openai thanks for adding this! just double-checking since I didn't see it in the PR description, have we validated this change in a github action anywhere? I would expect it to be safe but couldn't hurt to test

[jonlim-openai]

@dylan-hurd-oai I have added ripgrep to be included as part of the libraries included but there are no matching patterns for the repo that I am working on

Patterns are based on:

  rg -n -f /tmp/rg-patterns.txt -S --hidden --no-ignore-vcs \
    -g '!**/*.spec.ts' -g '!**/test/**' -g '!**/cypress/**' \
    -g '!**/assets/**' -g '!**/*.map' -g '!**/*.min.*' \
    -g '!**/screenshots/**' -g '!**/*.{gif,jpg,png,svg,ico,mp4}' \
    --no-heading --max-count 100 | head -n 100 > artifacts/hotspots_samples.txt || true
    
  rg -c -f /tmp/rg-patterns.txt -S --hidden --no-ignore-vcs \
    -g '!**/*.spec.ts' -g '!**/test/**' -g '!**/cypress/**' \
    -g '!**/assets/**' -g '!**/*.map' -g '!**/*.min.*' \
    -g '!**/screenshots/**' -g '!**/*.{gif,jpg,png,svg,ico,mp4}' \
    --no-messages | sort -t: -k2,2nr | head -n 50 > artifacts/hotspots_summary.txt || true
    
 In my CI file - let me  know if i am missing anything out

[jonlim-openai]

Logs:
security_priority.md
codex-sast-raw.log
codex-diff-raw.log

[dylan-hurd-oai]

@jonlim-openai what are we using this for?

[jonlim-openai]

It is just a filter to ignore those types of file paths

[dylan-hurd-oai]

but there are no matching patterns for the repo that I am working on

This is purely a change to our installation method to address openai/codex#2501 - I would expect no direct change in behavior, just a fewer error reports from customers when using our cookbook

[jonlim-openai]

The job runs to completion with no issues!