Commit Graph
2 Commits
Author SHA1 Message Date
Neil e9c80a4101 ci: use grep instead of rg in dependency audit prep (#33074)
GitHub's Ubuntu runners don't ship ripgrep, so the release dependency
scan failed with 'rg: command not found' before extracting lockfiles.
2026-10-24 00:28:59 -07:00
Neil 2078db93ec ci: check dependency vulnerabilities on PRs and stable releases (#31858)
* ci: audit dependency security without gating releases

* ci: audit stable release tags instead of running daily

* ci: isolate release audit data and fix integration checks

* ci: require exact audit inputs and ignore candidate archive attributes
2026-10-22 00:43:07 -07:00