Add OSV-Scanner-based security workflow - #362

Merged

vikrantpuppala merged 8 commits into

mainfrom

vp/security-scan

Jul 13, 2026

Commits on May 21, 2026

Add OSV-Scanner-based security workflow
vikrantpuppala
committed
3491780

Commits on Jul 10, 2026

fix(ci): close two fail-open holes in the OSV-Scanner gate
vikrantpuppala
committed
f691171
Merge remote-tracking branch 'origin/main' into vp/security-scan
vikrantpuppala
committed
e76ac75
fix(ci): bump security-scan Go toolchain to 1.25.x to match go.mod
vikrantpuppala
committed
77b9e02
ci(security): remove per-repo email, clear stdlib advisories, suppress openpgp
vikrantpuppala
committed
09a3fd6
ci: pin Go toolchain to exact 1.25.12 directive on protected runners
vikrantpuppala
committed
143cc3f
ci(security): report-only for scoreless stdlib advisories; keep honest floor
vikrantpuppala
committed
661b0d9
Merge remote-tracking branch 'origin/main' into vp/security-scan
vikrantpuppala
committed
c90a41e