ci: add security scanning #5
Loading…
Reference in a new issue
No description provided.
Delete branch "ci/security-scanning-20260822"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Adds checksum-verified Gitleaks scanning to pull requests and OSV-Scanner only for explicit JavaScript/Bun or Python lockfiles. Cargo inputs remain excluded. Initial findings are redacted audit warnings; scanner and integrity failures fail closed. Coordinated by ai_projects#287 and Bead ai_projects-4iqi.