ci: security scanning, with the findings read and justified #6

Closed

marcos-mendez wants to merge 1 commit from ci/security-scan into master

marcos-mendez commented

2026-10-07 14:55:00 -03:00

(Migrated from github.com)

Calls security-scan.yml of keel-linux/.github (gitleaks, bandit,
semgrep, shellcheck on hosted runners, no secrets) on pull requests,
pushes to master and by hand. Not a required check.

A scan of master finds nothing: no secret in the history, no semgrep or
shellcheck finding and no Python, so there is no baseline.

Calls security-scan.yml of keel-linux/.github (gitleaks, bandit, semgrep, shellcheck on hosted runners, no secrets) on pull requests, pushes to master and by hand. Not a required check. A scan of master finds nothing: no secret in the history, no semgrep or shellcheck finding and no Python, so there is no baseline.

marcos-mendez commented

2026-10-07 15:39:21 -03:00

(Migrated from github.com)

Closing: Apache is retired in Keel (LEMP with nginx and php-fpm replaces LAMP/LAPP, decisions 0023-0040); this repository is being archived.

Commenting is not possible because the repository is archived.

No reviewers