refactor: 7-tool MCP triage surface + SQLite survival tuning (#91) #145
security.yml
on: push
OSV-Scanner (SCA)
5s
Trivy (filesystem + container scan)
12s
Semgrep (SAST)
23s
Gitleaks (secret scan)
7s
jscpd (duplication < 3% on touched code)
15s
SBOM (SPDX + CycloneDX)
19s
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom
|
38.5 KB |
sha256:bfe5c995318617644820b5f64c0eaa895cb7077ef5733b3fbd43d657f34feaa6
|
|