chore(security): add CodeQL, merge-gate security scanners in CI, and full SECURITY.md - #64

Merged

yacosta738 merged 16 commits into

mainfrom

Jun 1, 2026

Commits on Jun 1, 2026

fix(build): allow cargo check without node_modules in worktree
yacosta738
committed
d8da7f8
fix(ci): address all code scanning security alerts
yacosta738
committed
9ba5461
fix(ci): harden checkout credentials and build script
yacosta738
committed
cb18d8f
Merge branch 'main' into maintenance
yacosta738
committed
c1780a3
fix(build): improve error messages for missing vite in release mode
yacosta738
committed
0c20109
fix(quality): resolve SonarQube issues across codebase
yacosta738
committed
b5bf3e7
style(lib): format code for better readability in lib.rs
yacosta738
committed
04c115f
Merge branch 'main' into maintenance
yacosta738
committed
55c14ad
chore(security): add CodeQL workflow and configure merge-gate security scanners in CI
yacosta738
committed
ba312a4
Merge branch 'main' into maintenance
yacosta738
authored
5c70e96
fix(codeql): pin codeql-action to existing SHA v3.36.0
yacosta738
committed
f7a349b
fix(security): address code scanning review findings across workflows and SECURITY.md
yacosta738
committed
6332f9d
fix(security-deep): replace aquasecurity/trivy-action with direct CLI install
yacosta738
committed
d51df5b
fix(codeql): build dashboard before cargo check so rust-embed resolves
yacosta738
committed
72fdd12
fix(codeql): use workspace filter for dashboard build in CodeQL workflow
yacosta738
committed
aac1224
chore: remove the custom CodeQL workflow entirely.
yacosta738
committed
f411c76