sec: Sigstore signing, SBOM, Grype, CodeQL + docs#73

Merged

Pyronewbic merged 3 commits into

mainfrom

May 13, 2026

Commits on May 13, 2026

fix: pass alert_email secret to Terraform plan and apply
Pyronewbic
committed
sec: add CodeQL SAST scanning on PRs and weekly schedule
Pyronewbic
committed
docs: security pipeline, set browser, collection tracking in changelog/README/internals
Pyronewbic
committed