feat: integrate enterprise security scanning suite#223

Merged

gowthamrao merged 9 commits into

mainfrom

feat/add-security-scans

May 15, 2026

Commits on May 15, 2026

feat: add OSV-Scanner workflow
gowthamrao
committed
feat: add security scanning suite (Scorecard, CodeQL, Bandit)
gowthamrao
committed
chore(security): harden github actions permissions and pin actions to SHAs
gowthamrao
committed
fix(security): correct invalid github action commit SHAs
gowthamrao
committed
fix(security): resolve osv-scanner path and bandit sarif dependencies
gowthamrao
committed
fix(security): remove redundant codeql.yml to resolve default setup conflict
gowthamrao
committed
docs: add OpenSSF Scorecard badge to README
gowthamrao
committed
feat(security): integrate Trivy IaC and TruffleHog secret scanning workflows
gowthamrao
committed
feat(security): integrate OWASP ZAP DAST scan workflow
gowthamrao
committed