Security Automation

Automate security operations for scale and efficiency.

Security Pipeline

Illustrative workflow only: action refs below are historical examples, not vetted pins. Select maintained upstream actions, review their code and pin full commit SHAs before use. Grant contents: read only unless a reviewed job needs more; never expose secrets to untrusted pull-request code. Install required CLIs at reviewed versions before their steps and verify each scanner’s failure behavior.

# .github/workflows/security.yml
name: Security Pipeline

on: [push, pull_request]
permissions:
  contents: read