cesnimda 98e94a8163 ci(security): run gitleaks binary + audit prod deps only ...

The container-mode runner has no Docker socket, so the gitleaks 'docker run'
step failed; download and run the binary instead. Scope npm audit to production
dependencies (--omit=dev) so dev-toolchain advisories don't block merges, and
match dotnet's own vulnerable-packages line to avoid severity-word false hits.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-01 11:26:25 +02:00

..

ci.yml

ci: add Gitea Actions build + test pipeline

2026-07-01 00:33:19 +02:00

deploy-prod.yml

ci: add secret/vuln scanning + staging & production deploy pipelines

2026-07-01 10:49:08 +02:00

deploy-staging.yml

ci: add secret/vuln scanning + staging & production deploy pipelines

2026-07-01 10:49:08 +02:00

security.yml

ci(security): run gitleaks binary + audit prod deps only

2026-07-01 11:26:25 +02:00