feat(api): the engine always serves TLS, minting on first run (BACKLOG #1276 part A, ADR 0172) #2421
security.yml
on: pull_request
pip-audit (dependency vulnerabilities)
1m 10s
npm-audit (ide dependency vulnerabilities)
8s
released-line-audit (latest release's pinned runtime)
0s
SBOMs (CycloneDX, multi-ecosystem)
0s
trivy (container image vulnerabilities)
0s
bandit (Python SAST)
30s
gitleaks (secret scan)
18s
semgrep (project SAST rules)
33s
crypto-inventory (ASVS 11.1.3 discovery gate)
11s
forbidden-content (customer/PHI leak guard)
46s