ci(security): enforce secret scan and remove temp CVE ignore#44

Closed

DivyamTalwar wants to merge 1 commit into

mainfrom

hotfix/launch-security-hardening-pr

DivyamTalwar commented Mar 25, 2026

Owner

What changed

add a dedicated mandatory security secret-scan job using gitleaks
remove the temporary from pip-audit
keep existing dependency-review and codeql jobs intact

Why

blocks secret regressions on PR and push to main
avoids masking CVE findings in security audit pipeline


          ci(security): enforce gitleaks and drop pip-audit CVE ignore

c3e34d3

DivyamTalwar commented Mar 25, 2026

Owner Author

Superseded by #45, same effective change on clean history branch. Keeping only #45 open.

DivyamTalwar closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet