Add OSV-Scanner security gate + clear all CVEs (Python floor to 3.10)#798

Open

vikrantpuppala wants to merge 6 commits into

mainfrom

vp/security-scan

Commits on Jul 16, 2026

Add OSV-Scanner-based security workflow
vikrantpuppala
committed
Harden OSV gate (fail-closed) + refresh lockfile to clear all CVEs
vikrantpuppala
committed
ci: drop Python 3.9 from CI matrices to match the ^3.10 floor
vikrantpuppala
committed
Document thrift CPE-gap accurately + add weekly NVD-CPE thrift watch
vikrantpuppala
committed
fix(types): resolve 2 mypy errors surfaced by the refreshed mypy
vikrantpuppala
committed
fix(tests): declare pytz explicitly (pandas 3.0 dropped it as a hard dep)
vikrantpuppala
committed