Commit Graph

5 Commits

Author SHA1 Message Date
AITBC System
b78c054a12 fix(security): resolve GitHub Actions workflow validation errors
- Remove invalid 'queries' input from CodeQL analyze action
- Fix OSSF Scorecard action input parameter names
- Use correct underscore naming for required inputs
2026-03-08 12:12:57 +01:00
AITBC System
586977e113 feat(security): add comprehensive security scanning workflow
- Add Bandit security scanning for Python code
- Add CodeQL security analysis for Python and JavaScript
- Add dependency security scanning with Safety and npm audit
- Add container security scanning with Trivy
- Add OSSF Scorecard for security best practices
- Add comprehensive security summary reporting

Fixes missing security-scanning.yml workflow file
2026-03-08 12:09:41 +01:00
oib
18886ae64b chore(workflows): remove agent-contributions and build-macos-packages workflow files
- Delete agent-contributions.yml (399 lines) with agent validation, rewards, swarm integration, and deployment jobs
- Delete build-macos-packages.yml (172 lines) with macOS native package build pipeline for arm64 and x86_64 targets
2026-03-04 15:48:02 +01:00
oib
2ec228e826 chore(workflows): disable all GitHub Actions workflows
- Add `workflow: disable: true` to 23 workflow files to temporarily disable CI/CD automation
- Affects agent-contributions, build-macos-packages, ci, cli-tests, comprehensive-tests, configuration-security, contracts-ci, dotenv-check, file-organization, markdown-link-check, phase8-integration, production-deploy, publish-github-packages, publish-native-packages-simple, publish-native-packages, publish-npm-packages, publish-packages-to-registry
2026-03-04 15:46:49 +01:00
oib
f353e00172 chore(security): enhance environment configuration, CI workflows, and wallet daemon with security improvements
- Restructure .env.example with security-focused documentation, service-specific environment file references, and AWS Secrets Manager integration
- Update CLI tests workflow to single Python 3.13 version, add pytest-mock dependency, and consolidate test execution with coverage
- Add comprehensive security validation to package publishing workflow with manual approval gates, secret scanning, and release
2026-03-03 10:33:46 +01:00