ci(#557): add CodeQL, Scorecard, dependency-review, Bandit/pip-audit gates#566

Merged

jinhongkuan merged 4 commits into

mainfrom

ci/557-security-gates

Jun 9, 2026

Commits on Jun 9, 2026

ci(#557): add CodeQL, Scorecard, dependency-review, Bandit/pip-audit gates

authored and
jinhongkuan
committed
ci(#557): Bandit advisory + Medium+ threshold; flip to blocking after #562

authored and
jinhongkuan
committed
ci(#557): make advisory Bandit green-with-findings (|| true) not red

authored and
jinhongkuan
committed
ci(security): avoid checkout credential persistence
jinhongkuan
committed