Repository hardening: CI, security scanning, and governance#8

Merged

AdamEXu merged 8 commits into

devfrom

security/repo-hardening

Jul 8, 2026

Commits on Jul 7, 2026

ci: add GitHub Actions, CodeQL, Dependabot, and repo governance

AdamEXu
and
claude
committed
fix(frontend): migrate eslint to flat config; add typecheck script

AdamEXu
and
claude
committed
chore(backend): ruff F/I baseline; fix undefined `Any` and unused assigns

AdamEXu
and
claude
committed
test(backend): add pytest scaffolding and security-critical tests

AdamEXu
and
claude
committed
fix(auth): stop logging raw request.args in OAuth callback

AdamEXu
and
claude
committed
Merge test/security-baseline: keep canonical hermetic conftest and encryption tests, drop superseded test_jwt.py

AdamEXu
and
claude
committed
CI: actually run the pytest suite; ruff-fix imported baseline test files

AdamEXu
and
claude
committed

Commits on Jul 8, 2026

Merge remote-tracking branch 'origin/dev' into security/repo-hardening
AdamEXu
committed