Commit Graph

5 Commits

Author SHA1 Message Date
Alexa Amundson
d03a0b503d 🔍 Enable CodeQL security scanning
Automated static application security testing (SAST) for vulnerability detection.

Features:
- Multi-language support (JavaScript, Python, Go, Java, etc.)
- Weekly automated scans (Mondays 4 AM UTC)
- Security + quality queries
- Automatic issue creation for failures
- SARIF result uploads for GitHub Security tab
- Compliance-ready (SOC 2, ISO 27001)

Expected Impact:
- Continuous vulnerability detection
- Early warning for security issues
- Compliance requirements met
- Proactive security posture

© 2025-2026 BlackRoad OS, Inc.
2026-01-04 16:58:13 -06:00
Alexa Amundson
53e285a0e5 🔒 Enable Dependabot security updates
Automatically updates dependencies with security vulnerabilities.

Features:
- 10 package ecosystems covered (npm, pip, docker, etc.)
- Daily checks for critical updates
- Auto-labels PRs with 'dependencies' and 'security'
- Ignores major version updates for stability
- Comprehensive security coverage

Expected Impact:
- Continuous vulnerability detection
- Automated security patches
- Compliance (SOC 2, ISO 27001)
- Proactive security posture

© 2025-2026 BlackRoad OS, Inc.
2026-01-04 16:52:57 -06:00
Alexa Amundson
318a5ef230 🤖 Add PR auto-merge workflow
Automatically merges PRs from auto-fix bot when all checks pass.

Features:
- Zero manual intervention for compliant PRs
- Validates all checks passed
- Safe merge (squash + delete branch)
- Creates issues for failed PRs
- Comprehensive logging

Expected Impact:
- 90%+ PR automation rate
- <5 minute merge time
- ~10 hours/week time savings

© 2025-2026 BlackRoad OS, Inc.
2026-01-04 16:24:35 -06:00
Alexa Amundson
622ca2bac1 Add code ownership and review requirements
Compliance requirement: Code review supervision (SEC WSPs)

🤖 Generated with Claude Code
2026-01-04 16:10:47 -06:00
Alexa Amundson
fcbcfabac2 Add security vulnerability reporting policy
Compliance requirement: SEC cybersecurity disclosure standards

🤖 Generated with Claude Code
2026-01-04 16:10:44 -06:00