ci: harden PR security — Semgrep, Gitleaks, CodeQL extended, dep review - #10

Merged

patlux merged 9 commits into

mainfrom

test-security-audit

May 28, 2026

Commits on May 28, 2026

ci: add CodeQL, Gitleaks, npm-audit security scans
patlux
committed
3f30cd0
ci: harden PR security with Semgrep, Gitleaks custom config, dependency review
patlux
committed
52c3971
ci: fix Semgrep paths, replace fake pkg with real lifecycle check
patlux
committed
0500c23
ci: fix Semgrep fetch rule, add CODEOWNERS and permissions
patlux
committed
2ff6d11
fix(ci): fix npm query parsing and add dependency graph setup instructions
patlux
committed
4ca7f8a
fix(security): simplify Gitleaks regex patterns to avoid RE2 compatibility issues
patlux
committed
dcf226a
fix(security): refine Semgrep rules to reduce false positives
patlux
committed
ac8dd74
fix(security): exclude setTimeout/setInterval with function literals from eval-like rule
patlux
committed
640ad08
chore: remove test-security-triggers.ts after CI verification
patlux
committed
64c09b4