docs(testing): master test plan — 17 chapters, 1,186 rows, a three-tier release gate #680
security.yml
on: pull_request
pip-audit (dependency vulnerabilities)
1m 16s
npm-audit (ide dependency vulnerabilities)
9s
SBOMs (CycloneDX, multi-ecosystem)
0s
trivy (container image vulnerabilities)
0s
bandit (Python SAST)
24s
gitleaks (secret scan)
15s
semgrep (project SAST rules)
29s
crypto-inventory (ASVS 11.1.3 discovery gate)
8s
forbidden-content (customer/PHI leak guard)
32s