ci: the margin table was wrong twice — re-measure the pool, and size the job cap from maxima #623
wshallwshallsecurity.yml
on: pull_request
pip-audit (dependency vulnerabilities)
1m 22s
npm-audit (ide dependency vulnerabilities)
10s
SBOMs (CycloneDX, multi-ecosystem)
trivy (container image vulnerabilities)
bandit (Python SAST)
26s
gitleaks (secret scan)
13s
semgrep (project SAST rules)
31s
crypto-inventory (ASVS 11.1.3 discovery gate)
11s
forbidden-content (customer/PHI leak guard)
30s