vrr/qwen-code
2
0
Fork 0
mirror of https://github.com/QwenLM/qwen-code.git synced 2026-08-25 08:33:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 17

chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard (#9008)

Browse source 
* chore(ci): add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and scorecard workflows

* chore(ci): pin TruffleHog scanner version and drop invalid path input

* fix(ci): close security workflow review gaps

* fix(ci): fail package audit on install errors

* test(ci): pin security workflow guardrails

* fix(ci): pin security workflow test assertions for SHA refs, status edges, and push trigger

* test(ci): pin security workflow edge guards

* test(ci): pin security workflow contracts

* test(ci): pin secret-scan push guard

* fix(ci): quote secret-scan condition

* fix(ci): audit workspace package locks directly

* fix(ci): scope security checks concurrency

* docs(ci): explain mobile audit skip

* test(ci): link trufflehog version pin
This commit is contained in:
易良 2026-08-14 01:22:53 +00:00 • committed by GitHub
parent 60c338f144
commit fb6637f0d3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 261 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.github/workflows/sdk-python.yml vendored
View file

@ -1,5 +1,8 @@
name: 'SDK Python'
permissions:
contents: 'read'
on:
pull_request:
branches: