i.kologriv/playground
1
0
Fork 0
Code Issues Pull Requests 14 Actions Packages Projects Releases Wiki Activity

Add Level 0 + Level 1 + Level 2 security scanning #14

Closed
testclient-admin wants to merge 5 commits from add-security-scanning into main
pull from: add-security-scanning
merge into: :main
Conversation 4 Commits 5 Files Changed 2
+112
testclient-admin commented 2026-08-23 19:21:10 +00:00
Owner
Copy Link
Copy Source

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.
testclient-admin added 3 commits 2026-08-23 19:21:10 +00:00
Level 0: security scanning for pull requests 8047899944
Level 0: security scanning for pull requests d44c735a8f
Level 0: security scanning for pull requests
security/scan 3 findings, 3 blocking
Details
security / scan (pull_request) Failing after 1m23s
Details
security/review 0 findings, 0 blocking
Details
security / review (pull_request) Successful in 1m30s
Details
security / deep-audit (pull_request) Skipped
Details
dd77d83477
testclient-admin added 1 commit 2026-08-23 19:21:11 +00:00
Level 0: security scanning for pull requests
security/scan 3 findings, 3 blocking
Details
security / scan (pull_request) Failing after 1m23s
Details
security/review 0 findings, 0 blocking
Details
security / review (pull_request) Successful in 1m30s
Details
security / deep-audit (pull_request) Skipped
Details
dd77d83477
playground-security-bot commented 2026-08-23 19:22:24 +00:00
Collaborator
Copy Link
Copy Source

Security scan (Level 0)

  • HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

Полный список: security-analysis/findings/pr-14/1787512942.json

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) Полный список: `security-analysis/findings/pr-14/1787512942.json` 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.
playground-security-bot added 1 commit 2026-08-23 19:22:25 +00:00
security: scan results for PR #14
security / scan (pull_request) Skipped
Details
security / review (pull_request) Skipped
Details
security / deep-audit (pull_request) Skipped
Details
17ccd126d1
playground-security-bot commented 2026-08-23 20:04:26 +00:00
Collaborator
Copy Link
Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.
playground-security-bot commented 2026-08-23 20:05:50 +00:00
Collaborator
Copy Link
Copy Source

Security scan (Level 0)

  • HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

Полный список: security-analysis/findings/pr-14/1787515549.json

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) Полный список: `security-analysis/findings/pr-14/1787515549.json` 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.
playground-security-bot added 1 commit 2026-08-23 20:05:51 +00:00
security: scan results for PR #14
security / scan (pull_request) Skipped
Details
security / review (pull_request) Skipped
Details
security / deep-audit (pull_request) Skipped
Details
dd77ea8ee6
playground-security-bot commented 2026-08-23 20:07:21 +00:00
Collaborator
Copy Link
Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.
testclient-admin closed this pull request 2026-08-25 02:01:54 +00:00
testclient-admin deleted branch add-security-scanning 2026-08-25 02:01:54 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
checkout-coding checkout-review davinchi dev1-demo dev1-playground global-security newaget3 newtestagent playground-security-bot shared-ui-coding testclient-admin web-api-review web-api-security web-frontend-coding i.kologriv (Ирина Кологрив)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: i.kologriv/playground#14