Skip to content

[Infra] scripts/verify-security-setup.js is not wired into CI, so it only runs manually #1059

Description

@grantfox-oss

Join our community: https://t.me/+DOylgFv1jyJlNzM0

Why this matters

scripts/verify-security-setup.js checks for required security configuration but is only invoked via npm run verify-security locally; nothing in .github/workflows runs it, so a misconfiguration can merge without anyone noticing.

Acceptance criteria

  • Add a CI step that runs npm run verify-security on pull requests
  • Confirm the script exits non-zero on a deliberately broken config to prove the gate works

Files to touch

  • scripts/verify-security-setup.js
  • .github/workflows/security.yml

Out of scope

Does not change what the script itself checks.

Metadata

Metadata

Assignees

Labels

Stellar WaveIssues in the Stellar wave programgood first issueGood for newcomersinfraCI/CD and infrastructuresecuritySecurity related tasks

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions