Skip to content

Add CodeQL and gitleaks to security workflow#3

Merged
csheaff merged 1 commit intomainfrom
dev
Feb 14, 2026
Merged

Add CodeQL and gitleaks to security workflow#3
csheaff merged 1 commit intomainfrom
dev

Conversation

@csheaff
Copy link
Owner

@csheaff csheaff commented Feb 14, 2026

Summary

  • CodeQL: static analysis of Python code (injection, path traversal, etc.)
  • gitleaks: scans full git history for accidentally committed secrets
  • Existing pip-audit dependency scanning unchanged

All run on PRs and weekly (Monday 9am UTC).

Test plan

  • Security workflow triggers on this PR

🤖 Generated with Claude Code

- CodeQL: static analysis of Python code (injection, path traversal, etc.)
- gitleaks: scans full git history for accidentally committed secrets
- pip-audit: existing dependency CVE scanning

All run on PRs and weekly schedule.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@csheaff csheaff changed the title Add tests and security scanning Add CodeQL and gitleaks to security workflow Feb 14, 2026
@csheaff csheaff merged commit b49c122 into main Feb 14, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant