merge(ci): adopt protected develop while preserving Bandit provenance

c1286c1

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

CodeQL - Code Quality on: dynamic

Analyze (javascript-typescript)

Analyze (python)

CodeQL on: dynamic

Analyze (actions)

Analyze (javascript-typescript)

Analyze (python)

Strix Security Scan on: pull_request_target 1

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Security Scan on: pull_request 4

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

Bandit Security Scan on: pull_request

security

CodeQL PR on: pull_request 7

Detect CodeQL languages

CodeQL compatibility analysis (actions)

CodeQL compatibility analysis (javascript-typescript)

CodeQL compatibility analysis (python)

Dispatch current-head CodeQL scan

Application CI on: pull_request

backend (Python 3.14)

frontend

Build and Publish Docker Images on: pull_request 1

validate backend image

validate naruon image

validate frontend image

publish ${{ matrix.component }} image

Detect AKS deploy configuration

Call Deploy to AKS

SAST Semgrep on: pull_request 1

Detect changed scope

Semgrep (multi-language SAST)

Code scanning results

Scorecard

Trivy

Bandit

CodeQL

Semgrep OSS

osv-scanner

GitHub Advanced Security / osv-scanner succeeded Sep 8, 2026 in 2s

No new alerts in code changed by this pull request

View all branch alerts.

Loading

Re-running checks...