Commit Graph

2 Commits

Author SHA1 Message Date
Your Name
64c51ba295 fix: Pin all GitHub Actions to full commit SHAs (13 files)
Security compliance - SHA pinning for all actions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-02-14 23:01:02 -06:00
Alexa Amundson
8665c910b2 🔍 Enable CodeQL security scanning
Automated static application security testing (SAST) for vulnerability detection.

Features:
- Multi-language support (JavaScript, Python, Go, Java, etc.)
- Weekly automated scans (Mondays 4 AM UTC)
- Security + quality queries
- Automatic issue creation for failures
- SARIF result uploads for GitHub Security tab
- Compliance-ready (SOC 2, ISO 27001)

Expected Impact:
- Continuous vulnerability detection
- Early warning for security issues
- Compliance requirements met
- Proactive security posture

© 2025-2026 BlackRoad OS, Inc.
2026-01-04 17:04:22 -06:00