2 Commits

Author	SHA1	Message	Date
Josh France	b503f96a22	fix: harden dependency-review workflow from adversarial review ... Fixes applied: - fail-on-scopes covers development deps, not just runtime (default) - path-filter to dependency manifests + workflow files (GitHub Actions ecosystem changes are also reviewed) - concurrency cancel-in-progress + 10min timeout, matching version-gate Auto-fixed by Claude watch-pipeline Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-13 15:18:13 -07:00
Josh France	dae910e5d9	ci: add dependency-review-action to scan PR dependency changes ... Fails PRs that introduce dependencies with known high/critical vulnerabilities; posts a summary comment on failure. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-13 14:57:53 -07:00