fix(governance): repair ruleset and Semgrep audit gates - #541

Merged

seonghobae merged 15 commits into

mainfrom

fix/central-ruleset-audit-token-20260713

Jul 13, 2026

Commits on Jul 13, 2026

fix(governance): audit inherited ruleset scope
seonghobae
committed
f25cba6
fix(security): filter suppressed Semgrep SARIF
seonghobae
committed
fe1700d
Merge remote-tracking branch 'origin/main' into fix/central-ruleset-audit-token-20260713
seonghobae
committed
11074d5
Merge branch 'main' into fix/central-ruleset-audit-token-20260713
seonghobae
authored
21e140d
Merge branch 'main' into fix/central-ruleset-audit-token-20260713
seonghobae
authored
cc7ef6b
Merge branch 'main' into fix/central-ruleset-audit-token-20260713
seonghobae
authored
dee72a7
Merge latest main into central governance fix
seonghobae
committed
627e4d9
fix: clarify central semgrep and approval gates
seonghobae
committed
f83216e
test: cover last-push approval restamp scheduler
seonghobae
committed
f2728a8
fix(security): avoid duplicate OSV SARIF uploads
seonghobae
committed
659863e
fix(ci): satisfy reusable OSV permission contract
seonghobae
committed
08b9146
fix(ci): centralize Scorecard SARIF uploads
seonghobae
committed
0e61a53
fix(security): separate SARIF upload quota from scanner gates
seonghobae
committed
0a24d9e
fix(ci): isolate default Scorecard upload quota
seonghobae
committed
2e9fb9b
fix(ci): expose SARIF upload quota failures
seonghobae
committed
b44a3c5