fix(store): ADR 0114 sub-lever A — the claim-proc startup gate has never passed #313
security.yml
on: pull_request
pip-audit (dependency vulnerabilities)
1m 24s
npm-audit (ide dependency vulnerabilities)
12s
SBOMs (CycloneDX, multi-ecosystem)
trivy (container image vulnerabilities)
bandit (Python SAST)
21s
gitleaks (secret scan)
11s
semgrep (project SAST rules)
33s
crypto-inventory (ASVS 11.1.3 discovery gate)
9s
forbidden-content (customer/PHI leak guard)
31s