ci: harden PR security pipeline (#10)

Add comprehensive security scanning to CI/CD pipeline including CodeQL, Gitleaks, Semgrep custom rules, dependency review, and lifecycle script checks
2026-05-28 23:58:50 +02:00
parent 17175abd28
commit 21d712a1cc
5 changed files with 492 additions and 0 deletions
@@ -0,0 +1,7 @@
+# Semgrep ignore patterns
+# Exclude test files and build artifacts
+
+tests/
+node_modules/
+dist/
+coverage/