Add Level 0 + Level 1 + Level 2 security scanning #16

Merged

testclient-admin merged 3 commits from add-security-scanning into main 2026-08-25 04:03:04 +00:00

Conversation 4 Commits 3 Files Changed 1

+16 -30

testclient-admin commented 2026-08-25 03:08:10 +00:00

Owner

Copy Link

Copy Source

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.

testclient-admin added 3 commits 2026-08-25 03:08:10 +00:00

Level 0: security scanning for pull requests dc1066e208

Level 0: security scanning for pull requests b4d891c229

Level 0: security scanning for pull requests d9d1da21ed

testclient-admin added 1 commit 2026-08-25 03:08:10 +00:00

Level 0: security scanning for pull requests d9d1da21ed

playground-security-bot commented 2026-08-25 03:09:08 +00:00

Collaborator

Copy Link

Copy Source

Security scan (Level 0)

• HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.

playground-security-bot commented 2026-08-25 03:10:36 +00:00

Collaborator

Copy Link

Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.

playground-security-bot commented 2026-08-25 03:11:32 +00:00

Collaborator

Copy Link

Copy Source

Security scan (Level 0)

• HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.

playground-security-bot commented 2026-08-25 03:12:59 +00:00

Collaborator

Copy Link

Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.

testclient-admin merged commit 789aa6adaa into main 2026-08-25 04:03:04 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

checkout-coding checkout-review davinchi dev1-demo dev1-playground global-security newaget3 newtestagent playground-security-bot shared-ui-coding testclient-admin web-api-review web-api-security web-frontend-coding i.kologriv (Ирина Кологрив)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: i.kologriv/playground#16