Harden CI: run the full security-audit scanner (workflows, package-lock, Python source) - #5733

Merged

vivekchand merged 11 commits into

mainfrom

harden/oss-actions-security-audit

Sep 10, 2026

Commits on Sep 8, 2026

Harden CI: run an Actions-security scanner on this repo's own workflows

vivekchand
and
claude
committed
818ef04
Narrow the scan to workflow definitions, the scope the blueprint describes

vivekchand
and
claude
committed
845c79a

Commits on Sep 9, 2026

Merge branch 'main' into harden/oss-actions-security-audit
vivekchand
authored
3b6c699
Merge branch 'main' into harden/oss-actions-security-audit
vivekchand
authored
7fbca62
Merge branch 'main' into harden/oss-actions-security-audit
vivekchand
authored
3c8bbbc
Merge branch 'main' into harden/oss-actions-security-audit
vivekchand
authored
52c072a
Harden CI: complete the security-audit scanner (deps + Python source)
claude
committed
5e9de09
Give the npm-audit step a Node of its own

vivekchand
and
claude
committed
dc6bcf9
Merge branch 'main' into harden/oss-actions-security-audit
vivekchand
authored
7eb8b0a

Commits on Sep 10, 2026