feat(security): resolve 5 code-scanning alerts (Alerts 11, 209, 210, … #465
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: MPL-2.0 | |
| name: Security Scan | |
| on: | |
| push: | |
| branches: [main] | |
| schedule: | |
| - cron: '0 0 * * 0' # Weekly on Sunday at midnight | |
| workflow_dispatch: | |
| # Cause-B mitigation (#77): cancel superseded runs so stacked pushes | |
| # to the same ref don't pile up identical jobs in the queue. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| scan: | |
| uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@136b38b305e5b04847de461cfbcdf73e1ff289f2 # main 2026-05-20 | |
| secrets: | |
| VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }} |