feat: Phase 6 cutover — delete Java reference, ship v1.0.0 #137
security.yml
on: pull_request
OSV-Scanner (SCA)
4s
Trivy (filesystem + container scan)
8s
Semgrep (SAST)
20s
Gitleaks (secret scan)
11s
jscpd (duplication < 3% on touched code)
17s
SBOM (SPDX + CycloneDX)
16s
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom
|
12.7 KB |
sha256:714ff46947dec4146c1fe8165a16ab3366e126dec421953fe700ad898ace3eb5
|
|