Repository navigation

ci(security): harden supply-chain assurance - #505

Merged

edithatogo merged 6 commits into

codex/t09-02-security-supply-chain

Aug 9, 2026

Merged

ci(security): harden supply-chain assurance#505
edithatogo merged 6 commits into
masterfrom
codex/t09-02-security-supply-chain

Commits on Aug 9, 2026
- ci(security): enforce immutable supply-chain checks
  60217257
  committed
  3fef13f
- feat(security): add SBOM and threat-model evidence
  60217257
  committed
  58d374f
- fix(security): encode complete SBOM package names
  60217257
  committed
  c178c82
- fix(security): grant OSV reusable workflow read scope
  60217257
  committed
  85d3177
- fix(security): retain CodeQL default setup
  60217257
  committed
  62ab72f
- fix(ci): close workflow security findings
  60217257
  committed
  6ab2763