fraqtal/agentic-dev
Template
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

chore(work): tick task in 06-codeql-and-audit-signatures

Browse Source
This commit is contained in:
Danijel Martinek
2026-05-14 19:54:42 +02:00
parent 480ec67a48
commit 1979041197
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/work/2026-05-14-ci-security-and-supply-chain/06-codeql-and-audit-signatures/_story.md
View File

@@ -3,7 +3,7 @@ id: 06-codeql-and-audit-signatures
epic: 2026-05-14-ci-security-and-supply-chain
title: CodeQL workflow + pnpm audit signatures
type: technical-story
status: todo
status: in-progress
feature: tooling
depends-on: []
blocks: [08-reviewer-prompt-update]
@@ -36,5 +36,5 @@ Add two baseline GitHub-native gates: (1) a `pnpm audit signatures --audit-level
## Tasks
- [ ] Add `pnpm audit signatures --audit-level=high` as a step in `ci.yml`'s `validate` job; one commit, all gates pass.
- [x] Add `pnpm audit signatures --audit-level=high` as a step in `ci.yml`'s `validate` job; one commit, all gates pass.
- [ ] Create `.github/workflows/codeql.yml` (language: `javascript-typescript`; triggers: push to main, pull_request, weekly schedule Wednesday 02:00 UTC; default queries; consumer note about GitHub Advanced Security requirement for private repos); one commit, all gates pass.