fix(robustness): P1+P2 follow-ups from brainstorm #70
security.yml
on: pull_request
OSV-Scanner (SCA)
8s
Trivy (filesystem + container scan)
20s
Semgrep (SAST)
25s
Gitleaks (secret scan)
11s
jscpd (duplication < 3% on touched code)
11s
SBOM (SPDX + CycloneDX)
19s
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom
|
43.9 KB |
sha256:d3952f8e2bcab1c1f3917259c695704607876f688125a5f9076c27e0d17f5d7d
|
|