NixReaper f063af70d8 ci: add CodeQL, cargo-audit, and ShellCheck security scanning ...

- CodeQL: scans JS/TS with security-extended + security-and-quality queries
- cargo-audit: scans Rust dependencies for known CVEs (--deny warnings)
- ShellCheck: lints install.sh and all shell scripts for bugs/vulnerabilities
- Runs on push to master, PRs, and weekly on Mondays at 08:00 UTC

2026-04-25 05:17:52 -05:00

..

codeql.yml

ci: add CodeQL, cargo-audit, and ShellCheck security scanning

2026-04-25 05:17:52 -05:00