fix(security): drop persisted credentials before dependency lifecycle code - #894

Draft

seonghobae wants to merge 16 commits into

fix/security-audit-checkout-credentials

Commits on Aug 17, 2026

test(security): require non-persistent audit checkout credentials
seonghobae
committed
f51a51e
fix(security): disable audit checkout credential persistence
seonghobae
committed
0f70859
docs(changelog): record audit credential hardening
seonghobae
committed
cee9387
docs(security): require non-persistent audit checkouts
seonghobae
committed
949db7d
test(security): cover dependency workflow credential boundaries
seonghobae
committed
bdf4628
test(security): keep credential contract formatter-clean
seonghobae
committed
7173e75
test(security): satisfy formatter before RED policy assertion
seonghobae
committed
587abfe
fix(security): drop persisted credentials before release dependencies
seonghobae
committed
35d434e
fix(security): drop persisted credentials before Bandit dependencies
seonghobae
committed
74b6cf9
docs(changelog): cover dependency lifecycle credential hardening
seonghobae
committed
be1305e
docs(changelog): preserve existing release history
seonghobae
committed
f4f2e2e
test(security): satisfy Ruff import-block formatting
seonghobae
committed
0ae1968
docs(changelog): restore protected release-history entry
seonghobae
committed
3d2c022
fix(test): restore formatter-clean workflow credential regression
seonghobae
committed
4116a0d
test(security): satisfy Ruff import ordering
seonghobae
committed
07160db
style(security): apply Ruff formatter output
seonghobae
committed
475adeb