Skip to content

ci(security): enforce secret scan and remove temp CVE ignore#45

Merged
DivyamTalwar merged 4 commits into
mainfrom
hotfix/launch-security-hardening
Mar 25, 2026
Merged

ci(security): enforce secret scan and remove temp CVE ignore#45
DivyamTalwar merged 4 commits into
mainfrom
hotfix/launch-security-hardening

Conversation

@DivyamTalwar

@DivyamTalwar DivyamTalwar commented Mar 25, 2026

Copy link
Copy Markdown
Owner

What changed

  • add a mandatory secret-scan job to Security workflow using gitleaks/gitleaks-action@v2
  • remove temporary --ignore-vuln CVE-2026-4539 from the pip-audit job

Why

  • block secret regressions on PR and push to main
  • avoid masking known vulnerabilities behind a temporary ignore flag

@DivyamTalwar DivyamTalwar force-pushed the hotfix/launch-security-hardening branch from c43ffb6 to 4f1f041 Compare March 25, 2026 20:48
@DivyamTalwar DivyamTalwar changed the title Hotfix/launch security hardening ci(security): enforce secret scan and remove temp CVE ignore Mar 25, 2026
@DivyamTalwar DivyamTalwar merged commit 062da1e into main Mar 25, 2026
13 checks passed
@DivyamTalwar DivyamTalwar deleted the hotfix/launch-security-hardening branch March 25, 2026 21:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant