Vateron-Media/XC_VM
1
0
Fork 0
mirror of https://github.com/Vateron-Media/XC_VM.git synced 2026-10-04 12:02:33 +02:00
Code Issues Packages Projects Releases 6 Wiki Activity
1,649 Commits 3 Branches 57 Tags
0408e7d8d3bebd95fe08b9a934387471ee94de45
Commit Graph
7 Commits
Author SHA1 Message Date
Divarion-D e474500978 ci: enhance Semgrep security scan with baseline commit resolution 2026-06-21 22:30:09 +03:00
dependabot[bot]andGitHub 9dff052fbd ci: bump actions/checkout from 6 to 7 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-21 19:17:46 +00:00
Divarion-D 484a758ca0 chore: add Git LFS tracking, CODEOWNERS, SECURITY.md, and CI workflows 2026-06-21 22:11:49 +03:00
Divarion-D 44d312a997 feat(security-scan): add gate job to control scan execution based on commit count 2026-04-21 14:57:02 +03:00
Divarion-D 518993bb66 ci: extract PHP syntax check into reusable script 
- Add tools/php_syntax_check.sh (supports full scan + single-file mode)
- CI workflow now calls the shared script
- All 6 agents updated to reference the script
- CONTRIBUTING.md: add Pre-Commit Checks section
- Exclude src/bin/* (third-party stubs) from lint
 2026-03-15 13:49:18 +03:00
Divarion-D e4e0fb7eb7 ci: upgrade actions to Node.js 24-compatible versions 
- actions/checkout@v4 -> @v5 (Node 24 since v5.0.0)
- github/codeql-action/upload-sarif@v3 -> @v4
- softprops/action-gh-release@v1 -> @v2
- shivammathur/setup-php@v2 stays (no v3 released yet)
 2026-03-15 12:41:13 +03:00
Divarion-D 1369b8fd20 ci: add security scan workflow with PHP syntax check and Semgrep 
New GitHub Actions workflow that runs on push/PR to main and weekly:

1. PHP Syntax Check: validates all src/*.php files with php -l
2. Semgrep Security Scan: runs php, security-audit, command-injection,
   sql-injection, and xss rule packs against src/

SARIF results are uploaded to GitHub Code Scanning.
 2026-03-15 12:28:34 +03:00