Danijel Martinek ea5db36da6 ci(tooling): add socket-cli scan step to validate job ...

Adds a supply-chain scan step that runs `socket-cli` against the
lockfile on PRs that touch package.json or pnpm-lock.yaml. The step
is gated behind a git-diff paths check so it only fires when dependency
files change. The repo-root .socket.json (critical → error) causes the
step to exit non-zero on any critical finding, blocking the PR.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-14 17:15:08 +00:00

..

ci.yml

ci(tooling): add socket-cli scan step to validate job

2026-05-14 17:15:08 +00:00

coverage-snapshot.yml

ci(coverage): wire L1 + L2 + auto-snapshot summary.json on merge

2026-05-13 14:12:02 +02:00

mutation-nightly.yml

feat(coverage): pnpm mutate (Stryker) + L3 implementation

2026-05-13 16:31:30 +02:00

release-please.yml

feat: hybrid versioning + automated CHANGELOG via release-please

2026-05-13 17:17:16 +02:00

sentry-pii-guard.yml

feat(eslint+ci): R40 boundary rule for @sentry/* + R31 sendDefaultPii grep gate

2026-05-07 20:31:15 +02:00