Repository navigation

sec(sscsb): close every verify gap but branch protection and signing-model; keep TruffleHog + Gitleaks for secrets - #22

Open

p4gs wants to merge 7 commits into

mainfrom

sec/sscsb-hardening

Open

sec(sscsb): close every verify gap but branch protection and signing-model; keep TruffleHog + Gitleaks for secrets#22
p4gs wants to merge 7 commits into
mainfrom
sec/sscsb-hardening

Commits on Sep 12, 2026
- sec(sscsb): close every verify gap but branch protection; TruffleHog is the only secret scanner
  
  p4gs
  and
  claude
  committed
  b50b020
Commits on Oct 6, 2026
- ci(codeql): analyse python too, so replacing default setup keeps its coverage
  
  p4gs
  and
  claude
  committed
  074a85b
- fix(deps): patch rustls for RUSTSEC-2026-0285
  
  p4gs
  and
  claude
  committed
  3fe5566
- secrets: keep Gitleaks alongside TruffleHog
  
  p4gs
  and
  claude
  committed
  c29097a
- docs(posture): describe TruffleHog + Gitleaks, and require gitleaks in the ruleset
  
  p4gs
  and
  claude
  committed
  8daf695
- docs(rulesets): the checked-in ruleset requires 14 checks, not 13
  
  p4gs
  and
  claude
  committed
  06295a4
- docs(secrets): say what --results=verified,unknown actually reports
  
  p4gs
  and
  claude
  committed
  aef7fc3