Skip to content

ci: add base-demo security scanners - #262

Merged
codeforester merged 2 commits into
mainfrom
security/260-20260827-add-shell-and-python-security-quality-gates-to-base-demo-ci
Aug 27, 2026
Merged

ci: add base-demo security scanners#262
codeforester merged 2 commits into
mainfrom
security/260-20260827-add-shell-and-python-security-quality-gates-to-base-demo-ci

Conversation

@codeforester

@codeforester codeforester commented Aug 27, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • add a bounded Ubuntu security-scanner job
  • run pinned Bandit 1.9.4 and pip-audit 2.10.1 against the project sources/lock
  • run ShellCheck over tracked shell entrypoints
  • document and validate the security workflow contract

Validation

  • mise run validate (isolated caches)
  • Bandit 1.9.4
  • pip-audit 2.10.1: no known vulnerabilities
  • ShellCheck 0.11.0

Fixes #260

@codeforester
codeforester merged commit b9217ab into main Aug 27, 2026
6 checks passed
@codeforester
codeforester deleted the security/260-20260827-add-shell-and-python-security-quality-gates-to-base-demo-ci branch August 27, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add shell and Python security quality gates to base-demo CI

1 participant