Add OSV-Scanner-based security workflow#362

Merged

vikrantpuppala merged 8 commits into

mainfrom

vp/security-scan

Jul 13, 2026

Commits on May 21, 2026

Add OSV-Scanner-based security workflow
vikrantpuppala
committed

Commits on Jul 10, 2026

fix(ci): close two fail-open holes in the OSV-Scanner gate
vikrantpuppala
committed
Merge remote-tracking branch 'origin/main' into vp/security-scan
vikrantpuppala
committed
fix(ci): bump security-scan Go toolchain to 1.25.x to match go.mod
vikrantpuppala
committed
ci(security): remove per-repo email, clear stdlib advisories, suppress openpgp
vikrantpuppala
committed
ci: pin Go toolchain to exact 1.25.12 directive on protected runners
vikrantpuppala
committed
ci(security): report-only for scoreless stdlib advisories; keep honest floor
vikrantpuppala
committed
Merge remote-tracking branch 'origin/main' into vp/security-scan
vikrantpuppala
committed