feat: production-ready infrastructure

- Add MIT LICENSE file
- Add GitHub Actions CI (lint, test on 3.10/3.11/3.12, format)
- Add CodeQL security analysis workflow
- Add CONTRIBUTING.md, SECURITY.md, CHANGELOG.md
- Add issue templates and PR template
- Add .editorconfig
- Enhance README with badges, architecture, FAQ

Author: root

.editorconfig

@@ -0,0 +1,31 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4
+
+[*.yml]
+indent_size = 2
+
+[*.yaml]
+indent_size = 2
+
+[*.json]
+indent_size = 2
+
+[Makefile]
+indent_style = tab
+indent_size = 4
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Dockerfile]
+indent_size = 4
+
+[*.lock]
+insert_final_newline = false

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,69 @@
+---
+name: Bug report
+about: Report a bug or security concern in BugFinder
+title: ""
+labels: bug, needs-triage
+assignees: ""
+---
+
+## Bug Description
+
+A clear and concise description of the bug.
+
+## Security Impact
+
+Does this bug have security implications? For example: crash, data leak, scope bypass, permission escalation, false negative/positive.
+
+- [ ] Yes — mark this issue as confidential if the details are sensitive
+- [ ] No
+
+## Steps to Reproduce
+
+1. Run command: `bf scan ...`
+2. ...
+3. See error
+
+## Expected Behaviour
+
+What should have happened?
+
+## Actual Behaviour
+
+What actually happened? Include error output, stack traces, or unexpected behaviour.
+
+## Environment
+
+- BugFinder version: [e.g. 0.1.0 or commit hash]
+- Python version: [e.g. 3.12.0]
+- OS: [e.g. Linux, macOS]
+- Docker: [yes/no]
+- AI provider enabled: [NVIDIA / none]
+
+## Target Information (if applicable)
+
+- Target type: [website / API / APK / IP / cloud / other]
+- Did you configure scope enforcement? [yes/no]
+
+## Configuration
+
+```yaml
+# Paste relevant config (redact API keys and secrets)
+BF_ALLOWED_DOMAINS=
+BF_MAX_CONCURRENT_TASKS=
+BF_RATE_LIMIT_PER_SECOND=
+BF_BEGINNER_MODE=
+```
+
+## Logs
+
+```text
+# Paste relevant log output here
+```
+
+## Additional Context
+
+Add any other context, screenshots, or related issues.
+
+## Possible Fix
+
+If you have a suggestion for the fix, include it here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,58 @@
+---
+name: Feature request
+about: Suggest an idea for BugFinder
+title: ""
+labels: enhancement
+assignees: ""
+---
+
+## Problem Statement
+
+What problem would this feature solve? Example: "I'm always frustrated when [...]"
+
+## Proposed Solution
+
+Describe the solution you'd like. Be specific about CLI interface, behaviour, and configuration.
+
+## Alternative Solutions
+
+What alternative approaches have you considered?
+
+## Target Type
+
+Does this feature apply to a specific target type?
+
+- [ ] Web
+- [ ] API
+- [ ] Android / APK
+- [ ] Cloud
+- [ ] Infrastructure / network
+- [ ] Secrets
+- [ ] Reconnaissance
+- [ ] General / across all targets
+
+## AI Integration
+
+Should this feature use the AI planning or explanation system?
+
+- [ ] Yes — leverage AI for reasoning
+- [ ] No — rule-based only
+- [ ] Maybe — both approaches
+
+## Plugin Potential
+
+Would this feature work well as a plugin?
+
+- [ ] Yes — core support + plugin
+- [ ] No — belongs in core
+
+## Example Usage
+
+```bash
+# Show how the feature would be used
+bf scan <target> --new-flag
+```
+
+## Additional Context
+
+Add any other context, mockups, or references.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,46 @@
+## Description
+
+Please include a summary of the changes and the motivation. List any dependencies required.
+
+Closes # (issue)
+
+## Type of Change
+
+- [ ] Bug fix (non-breaking change fixing an issue)
+- [ ] New feature (non-breaking change adding functionality)
+- [ ] Breaking change (fix or feature altering existing behaviour)
+- [ ] Documentation update
+- [ ] Security fix
+- [ ] CI / infrastructure
+
+## Security Checklist
+
+- [ ] I have considered the security impact of these changes
+- [ ] No API keys, tokens, or secrets are exposed
+- [ ] Scope enforcement and rate limiting are respected
+- [ ] Input validation and sanitization are applied where appropriate
+- [ ] Changes do not introduce unsafe deserialization, command injection, or path traversal
+
+## Testing
+
+- [ ] New tests have been added
+- [ ] All existing tests pass (`make test`)
+- [ ] Lint passes (`make lint`)
+- [ ] Format check passes (`make format`)
+- [ ] Type check passes (`make typecheck`)
+- [ ] Pre-commit hooks pass (`make precommit`)
+
+## Documentation
+
+- [ ] Docstrings added/updated for public APIs
+- [ ] README updated if user-facing behaviour changed
+- [ ] CLI help text updated if commands changed
+- [ ] Changelog entry added
+
+## Screenshots
+
+If applicable, add screenshots to explain visual changes.
+
+## Additional Notes
+
+Any other information reviewers should know.

.github/workflows/ci.yml

@@ -7,7 +7,7 @@ on:
     branches: [main]
 
 env:
-  PYTHON_VERSION: "3.13"
+  PYTHON_VERSION: "3.12"
 
 jobs:
   lint:
@@ -42,11 +42,11 @@ jobs:
         continue-on-error: true
 
   test:
-    name: Test
+    name: Test (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.12", "3.13"]
+        python-version: ["3.10", "3.11", "3.12"]
     steps:
       - uses: actions/checkout@v4
       - name: Install uv
@@ -66,6 +66,7 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    needs: [lint, typecheck, test]
     steps:
       - uses: actions/checkout@v4
       - name: Install uv

.github/workflows/codeql.yml

@@ -0,0 +1,40 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "0 6 * * 1"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [python]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          queries: security-extended,security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{ matrix.language }}"

CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+All notable changes to BugFinder will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2025-01-01
+
+### Added
+
+- Initial release of BugFinder
+- **CLI**: `bf scan`, `bf tui`, `bf report`, `bf config`, `bf list-agents`, `bf plugin` commands
+- **Auto-detection**: Automatic target type identification (website, API, APK, IP range, Docker, cloud)
+- **AI integration**: NVIDIA API for intelligent planning, explanation, and report generation
+- **Dual mode**: Beginner (guided + educational) and Expert (full control) modes
+- **Knowledge graph**: Asset relationship mapping using NetworkX
+- **Plugin system**: Extensible architecture for custom modules
+- **Textual TUI**: Rich terminal dashboard with real-time scan progress
+- **Multi-format reports**: Markdown, HTML, PDF, JSON, CSV export
+- **Scope enforcement**: Domain/IP allowlisting and rate limiting
+- **Assessment agents**:
+  - Web application scanners
+  - API testing
+  - APK analysis
+  - Cloud configuration review
+  - Infrastructure/network scanning
+  - Secret detection
+  - Reconnaissance
+- **Database**: SQLAlchemy + Alembic with SQLite and Postgres support
+- **Docker support**: Pre-built container images