fix(ci): use jq to parse gitleaks SARIF and scope ❌ gate to real findings#451

Merged

mvillmow merged 10 commits into

mainfrom

fix/security-scan-gitleaks-jq

Apr 26, 2026

Commits on Apr 26, 2026

fix(ci): use jq to parse gitleaks SARIF and scope ❌ gate to real findings

mvillmow
and
claude
committed
fix(ci): allowlist doc/example false positives in gitleaks scan

mvillmow
and
claude
committed
ci: align security-scan job names to required checks; drop orphan _required.yml

mvillmow
and
claude
committed
fix(test): remove pytest.ini that shadowed pyproject.toml config

mvillmow
and
claude
committed
ci: remove duplicate codeql-analysis job from security-scan.yml

mvillmow
and
claude
committed
fix(ci): restore _required.yml; clear conflicting classic branch-protection checks

mvillmow
and
claude
committed
ci: consolidate all workflows into _required.yml

mvillmow
and
claude
committed
ci: consolidate all workflows into _required.yml

mvillmow
and
claude
committed
fix(ci): filter cmake-integration false positives from clang-tidy gate

mvillmow
and
claude
committed
fix(test): patch keystone.daemon.run instead of dead run_routing_loop

mvillmow
and
claude
committed