mirror of
https://github.com/pezkuwichain/pezkuwi-subquery.git
synced 2026-04-22 01:57:58 +00:00
46ca19c22d
Security workflow includes: - CodeQL static analysis for TypeScript vulnerabilities - npm audit for dependency vulnerabilities (fails on critical) - Dependency review on PRs (blocks high severity, GPL licenses) - TruffleHog secret scanning - Weekly scheduled security scans Code quality workflow includes: - ESLint linting checks - Prettier formatting validation - TypeScript strict type checking - Cyclomatic complexity analysis (warns on >15) - Duplicate code detection with jscpd