Repository navigation

ci: security static analysis (Sobelow, CodeQL) and dependency scanning - #15

Merged

HackTuah merged 6 commits into

mainfrom

Oct 6, 2026

Merged

ci: security static analysis (Sobelow, CodeQL) and dependency scanning#15
HackTuah merged 6 commits into
mainfrom
silver/sast

Commits on Oct 6, 2026
- fix(server): read the lookup cache without executable terms
  
  Ayla Croft
  and
  claude
  committed
  0288dd8
- ci(server): run Sobelow on every pull request
  
  Ayla Croft
  and
  claude
  committed
  757713f
- ci: scan every lockfile for known vulnerabilities, also before a release
  
  Ayla Croft
  and
  claude
  committed
  a2a1fe4
- ci(deps): Dependabot updates the docs site's npm packages too
  
  Ayla Croft
  and
  claude
  committed
  0c72e01
- ci: run CodeQL on JavaScript and the workflows
  
  Ayla Croft
  and
  claude
  committed
  70c79c7
- docs(security): dependency and static analysis policy
  
  Ayla Croft
  and
  claude
  committed
  f902d27