ci: add security scanning and governance docs#5
Merged
Conversation
BA-CalderonMorales
force-pushed
the
auto/security-testing-1776990952
branch
2 times, most recently
from
April 24, 2026 00:52
7fc07ea to
6c10d1b
Compare
There was a problem hiding this comment.
Pull request overview
This PR introduces repository governance files (license + contribution/community standards) and adds a GitHub Actions workflow intended to run security scanning for the project.
Changes:
- Added Apache 2.0
LICENSE, along withCONTRIBUTING.mdandCODE_OF_CONDUCT.md. - Updated
.gitignoreto ignore a specific script path. - Added a reusable-workflow-based GitHub Actions security scan (
.github/workflows/security-scan.yml).
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| LICENSE | Adds an Apache 2.0 license file (currently abbreviated) |
| CONTRIBUTING.md | Adds basic contribution guidelines referencing the Code of Conduct |
| CODE_OF_CONDUCT.md | Adds a code of conduct for community standards |
| .gitignore | Ignores scripts/prune-branches.sh |
| .github/workflows/security-scan.yml | Adds a security scan workflow invoking an external reusable workflow |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
BA-CalderonMorales
force-pushed
the
auto/security-testing-1776990952
branch
from
April 24, 2026 01:22
6c10d1b to
34c82bb
Compare
There was a problem hiding this comment.
Pull request overview
This PR adds a GitHub Actions security scanning workflow and introduces baseline repository governance/legal documentation for the codex-cheat-sheet project.
Changes:
- Add a reusable GitHub Actions workflow for security scanning on
push/pull_request. - Add repository governance files:
LICENSE,CONTRIBUTING.md, andCODE_OF_CONDUCT.md. - Update
.gitignoreto ignore a local helper script path.
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
LICENSE |
Introduces an Apache 2.0 license notice/header (currently not the full license text). |
CONTRIBUTING.md |
Adds basic contribution steps and links to the Code of Conduct. |
CODE_OF_CONDUCT.md |
Adds a project Code of Conduct document. |
.gitignore |
Adds an ignore rule for scripts/prune-branches.sh. |
.github/workflows/security-scan.yml |
Adds a “Security Scan” workflow that calls a reusable workflow pinned to a commit SHA. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
BA-CalderonMorales
changed the title
BA-CalderonMorales
added a commit
that referenced
this pull request
Jul 19, 2026
* ci: add security scanning and governance docs (#5) * chore: ignore ephemeral prune-branches.sh * chore: add standard repo files LICENSE CONTRIBUTING.md CODE_OF_CONDUCT.md * ci: add gitleaks security scanning workflow * fix: use full apache 2.0 license text * fix: align readme license with apache 2.0 * docs: update to July 2026 — GPT-5.6 models, new docs URLs, new commands (#7) - Add official installer (curl -fsSL) as primary install method - Update model section to GPT-5.6 family (Sol, Terra, Luna) - Migrate docs URLs to developers.openai.com/codex - Add slash commands: /debug, /status, /mcp, /side, /fork, /ps, /stop, /logout, /feedback - Mark Task Goals GA - Update SDK reference - Replace hero image with repo-bundled assets/image.png - Bump timestamps to July 2026 Co-authored-by: Brandon Calderon-Morales <b.dev.c.m@gmail.com> * docs: swap hero image to updated asset + link to openai.com/codex --------- Co-authored-by: Brandon Calderon-Morales <b.dev.c.m@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated security and testing improvements for codex-cheat-sheet.