NeilandOrca 5092d292ff ci: add Snyk security scanning on PRs (SCA + Code) ...

Adds a Snyk CI/CD workflow that scans dependency manifests (root + mobile
pnpm lockfiles) and runs SAST on our source. High/Critical findings block
the PR; results upload to the GitHub Security tab as SARIF. Pushes to main
take a snyk monitor snapshot. Fork PRs skip the scans (no SNYK_TOKEN) but
still report green so this can be a required check.

Co-authored-by: Orca <help@stably.ai>

2026-07-08 16:07:28 -07:00

..

ISSUE_TEMPLATE

Update oxlint and oxfmt

2026-05-30 13:09:17 -07:00

scripts

Use generated README downloads badge

2026-06-16 11:09:40 -07:00

workflows

ci: add Snyk security scanning on PRs (SCA + Code)

2026-07-08 16:07:28 -07:00

CONTRIBUTING.md

Update CONTRIBUTING.md

2026-06-01 23:38:15 -07:00

pull_request_template.md

docs: add contribution guide and PR template (#163)

2026-03-28 10:44:02 -07:00