ci: make security findings actionable#15

Merged

ichwars merged 1 commit into

mainfrom

codex/security-quality-baseline

Jul 12, 2026

ichwars commented Jul 12, 2026

Owner

Summary

exclude test fixtures from the production Bandit scan
publish only fixable Trivy vulnerabilities to the actionable GitHub code-scanning queue
retain explicit full-scan capability for unfixed upstream findings

Validation

local Bandit production scan: passed
frontend ESLint: passed


          ci: make security findings actionable

f96cf84

ichwars merged commit f169132 into main

30 checks passed

ichwars deleted the codex/security-quality-baseline branch

July 19, 2026 10:16

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet