ci: harden PR security — Semgrep, Gitleaks, CodeQL extended, dep review#10

Merged

patlux merged 9 commits into

mainfrom

test-security-audit

May 28, 2026

Commits on May 28, 2026

ci: add CodeQL, Gitleaks, npm-audit security scans
patlux
committed
ci: harden PR security with Semgrep, Gitleaks custom config, dependency review
patlux
committed
ci: fix Semgrep paths, replace fake pkg with real lifecycle check
patlux
committed
ci: fix Semgrep fetch rule, add CODEOWNERS and permissions
patlux
committed
fix(ci): fix npm query parsing and add dependency graph setup instructions
patlux
committed
fix(security): simplify Gitleaks regex patterns to avoid RE2 compatibility issues
patlux
committed
fix(security): refine Semgrep rules to reduce false positives
patlux
committed
fix(security): exclude setTimeout/setInterval with function literals from eval-like rule
patlux
committed
chore: remove test-security-triggers.ts after CI verification
patlux
committed