ci(security): real scans, tokenless — dependabot, pip-audit over the lock, CodeQL (#291) - #320

Merged

eaitbrahim merged 2 commits into

mainfrom

phase8/security-scans

Aug 17, 2026

Commits on Aug 17, 2026

ci(security): real scans, tokenless — dependabot, pip-audit over the lock, CodeQL (#291)
eaitbrahim
committed
6b75979
ci(security): review fixes — frozen export, filesystem-derived manifests, the preflight-guard invariant, pyyaml declared
eaitbrahim
committed
874d718