Commit Graph
7 Commits
Author SHA1 Message Date
SatoshiQaziMuhammed 429140ab20 ci(security): scan new commits on push/PR and the current tree weekly
`base: main` made every push to main rescan the whole history, where Nova's
own Infura keys are still live, so Secret Scan was red on every push and a
new leak would have read as the same old red.

- push and pull_request: no `base`, so the action scans only the commits the
  event brings
- schedule: scan a `git archive HEAD` copy of today's tree
- pin the action to v3.99.2 by commit and the image to 3.99.2 (was @main and
  latest)
2026-10-17 21:05:28 +04:00
Kurdistan Tech Ministry ff19f88323 ci: run CodeQL on self-hosted runner (push only, not PRs) 2026-02-22 16:42:11 +03:00
Kurdistan Tech Ministry 652913da35 ci: mark CodeQL as non-blocking due to runner memory limits 2026-02-22 16:08:01 +03:00
Kurdistan Tech Ministry 8760a0b9da ci: add google-services.json setup to security workflow for CodeQL build 2026-02-22 05:44:03 +03:00
Kurdistan Tech Ministry 61451ca178 ci: fix security workflow - add secrets, install action, remove continue-on-error 2026-02-22 05:36:04 +03:00
Kurdistan Tech Ministry 03075104b4 fix: reduce false positives in hardcoded secrets scan 2026-02-19 06:30:18 +03:00
Kurdistan Tech Ministry 3061555485 ci: add Code Quality and Security workflows (ktlint, CodeQL, secret scan) 2026-02-19 05:56:11 +03:00