[SECURITY] HIGH/CRITICAL CVEs found in PR #1

[github-actions]

Security Finding

Workflow: Security Gates
PR: #1
Commit: 2cdab79

Trivy detected CRITICAL/HIGH CVEs in dependency scan. Review the Security tab for details.

CVSS Threshold Policy:

• CVSS > 9.0 → blocked build
• CVSS 7.0-8.9 → this ticket (must be remediated within 30 days)
• CVSS < 7.0 → logged only