Repository navigation

security: extend Dependabot (gomod, actions) and add SECURITY.md - #3

Merged

henryd24 merged 6 commits into

mainfrom

security/hardening

Oct 9, 2026

Merged

security: extend Dependabot (gomod, actions) and add SECURITY.md#3
henryd24 merged 6 commits into
mainfrom
security/hardening

Commits on Oct 9, 2026
- docs: add SECURITY.md
  
  henryd24
  and
  claude
  committed
  b9ff679
- ci: extend Dependabot to gomod and github-actions with cooldown
  
  henryd24
  and
  claude
  committed
  098538f
- ci: pin actions by SHA, add concurrency, go mod verify and govulncheck
  
  henryd24
  and
  claude
  committed
  eea677c
- ci: harden release workflow (pin actions, read-only default, no tag interpolation)
  
  henryd24
  and
  claude
  committed
  32575cb
- ci: add CodeQL analysis for Go
  
  henryd24
  and
  claude
  committed
  80324b2
- fix(security): bump Go to 1.26.9 and x/text to v0.42.0 to clear govulncheck findings
  claude
  committed
  0ae4834