feat(security): comprehensive security scanning (SAST, SCA, SBOM, DAST, coverage)#21

Merged

yokoszn merged 9 commits into

claude/security-scanning-setup-FE3NQ

Apr 25, 2026

Commits on Apr 23, 2026

feat(security): add comprehensive security scanning pipeline
claude
committed
fix(security): soft-fail scanners and fix CI regressions on first run
claude
committed
perf(ci): concurrency, path filters, composite setup + security hardening
claude
committed
fix(ci): resolve pre-existing CI failures and harden SARIF uploads
claude
committed
fix(ci): sanitize coverage artifact/flag names - reject @ and /
claude
committed
fix(ci): gate SARIF uploads to push events to avoid PR baseline deltas
claude
committed
chore(security): upgrade + SHA-pin all third-party security actions
claude
committed
ci: target twn-main as primary integration branch
claude
committed
fix(security): close GHA injection + SSRF vectors I introduced
claude
committed