From 52f458a785595cc866bda12d08769e8e53c4b14a Mon Sep 17 00:00:00 2001
From: testclient-admin <admin@testclient.local>
Date: Sun, 23 Aug 2026 13:39:57 +0000
Subject: [PATCH] Level 0: security scanning for pull requests

---
 security-analysis/policy.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 security-analysis/policy.yml

diff --git a/security-analysis/policy.yml b/security-analysis/policy.yml
new file mode 100644
index 0000000..1e294b0
--- /dev/null
+++ b/security-analysis/policy.yml
@@ -0,0 +1,7 @@
+# Какие находки блокируют merge. Читает security.yml на каждом
+# скане; отсутствие файла — те же значения по умолчанию.
+security:
+  block_on:
+    - critical
+    - high
+  min_confidence: 0.7