chore(security): automated monthly SBOM & VEX report - #965

Open

Gustavohsdp wants to merge 8 commits into

developmentfrom

chore/security-monthly

Commits on Jul 27, 2026

chore(security): automated monthly SBOM & VEX report

Gustavohsdp
and
claude
committed
645381c

Commits on Jul 31, 2026

ci(security): PR gate v2 (reads-only + sticky comment) + archive on merge

Gustavohsdp
and
claude
committed
010b001
Merge branch 'development' into chore/security-monthly
Gustavohsdp
authored
fbe7672

Commits on Aug 4, 2026

fix(security): address PR review — close 6 gate/report bugs

Gustavohsdp
and
claude
committed
bbd5e96
fix(security): 2nd review pass + drop AI triage on this public repo

Gustavohsdp
and
claude
committed
8d40f7c
fix(security): report from live scan + archive to orphan branch + PR-token fallback (public: no AI)

Gustavohsdp
and
claude
committed
025a8bf
Merge branch 'development' into chore/security-monthly
Gustavohsdp
authored
facea8a
docs(security): report methodology says OSV/osv-scanner, not npm audit

Gustavohsdp
and
claude
committed
08b46a3