feat(api): the engine always serves TLS, minting on first run (BACKLOG #1276 part A, ADR 0172) #2421

Job	Run time
bandit (Python SAST)	30s
npm-audit (ide dependency vulnerabilities)	8s
crypto-inventory (ASVS 11.1.3 discovery gate)	11s
semgrep (project SAST rules)	33s
gitleaks (secret scan)	18s
forbidden-content (customer/PHI leak guard)	46s
pip-audit (dependency vulnerabilities)	1m 10s
SBOMs (CycloneDX, multi-ecosystem)	0s
released-line-audit (latest release's pinned runtime)	0s
trivy (container image vulnerabilities)	0s
	3m 36s

Navigation Menu