Security

ci(zizmor): adopt 1.28.0 — fix what is wrong, justify what is not, and pin the premises #463

Sign in to view logs

Triggered via pull request August 2, 2026 00:36

synchronize #130

zizmor-1280-adoption

Status Success

Total duration 3m 24s

Artifacts –

security.yml

on: pull_request

pip-audit (dependency vulnerabilities)

npm-audit (ide dependency vulnerabilities)

SBOMs (CycloneDX, multi-ecosystem)

trivy (container image vulnerabilities)

bandit (Python SAST)

gitleaks (secret scan)

semgrep (project SAST rules)

crypto-inventory (ASVS 11.1.3 discovery gate)

forbidden-content (customer/PHI leak guard)