i.kologriv/playground
1
0
Fork 0
Code Issues Pull Requests 14 Actions Packages Projects Releases Wiki Activity

Add Level 0 + Level 1 + Level 2 security scanning #15

Closed
testclient-admin wants to merge 0 commits from add-security-scanning into main
pull from: add-security-scanning
merge into: :main
Conversation 4 Commits - Files Changed -
+16 -30
testclient-admin commented 2026-08-25 02:01:56 +00:00
Owner
Copy Link
Copy Source

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.

Level 0: semgrep + gitleaks (на каждый PR). Level 1: headless AI PR review, coder-fast (на каждый PR). Level 2: Deep Security Audit, coder-think, 6 доменных агентов + верификатор (по запросу, workflow_dispatch на security.yml). Находки — в security-analysis/, комментарии и статусы — от имени <проект>-security-bot.
testclient-admin added 3 commits 2026-08-25 02:01:57 +00:00
Level 0: security scanning for pull requests a04de2beaf
Level 0: security scanning for pull requests 2fab3f750c
Level 0: security scanning for pull requests
security/scan 3 findings, 3 blocking
Details
security / scan (pull_request) Failing after 58s
Details
security/review 0 findings, 0 blocking
Details
security / review (pull_request) Successful in 1m29s
Details
security / deep-audit (pull_request) Skipped
Details
3703c857ef
testclient-admin added 1 commit 2026-08-25 02:01:57 +00:00
Level 0: security scanning for pull requests
security/scan 3 findings, 3 blocking
Details
security / scan (pull_request) Failing after 58s
Details
security/review 0 findings, 0 blocking
Details
security / review (pull_request) Successful in 1m29s
Details
security / deep-audit (pull_request) Skipped
Details
3703c857ef
playground-security-bot commented 2026-08-25 02:02:58 +00:00
Collaborator
Copy Link
Copy Source

Security scan (Level 0)

  • HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

Полный список: security-analysis/findings/pr-15/1787623377.json

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) Полный список: `security-analysis/findings/pr-15/1787623377.json` 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.
playground-security-bot added 1 commit 2026-08-25 02:02:59 +00:00
security: scan results for PR #15
security / scan (pull_request) Skipped
Details
security / review (pull_request) Skipped
Details
security / deep-audit (pull_request) Skipped
Details
dbb99999fc
playground-security-bot commented 2026-08-25 02:04:27 +00:00
Collaborator
Copy Link
Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.
playground-security-bot commented 2026-08-25 02:05:26 +00:00
Collaborator
Copy Link
Copy Source

Security scan (Level 0)

  • HIGH: 3

HIGH README.md:27 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:36 — Potential secret: curl-auth-header (gitleaks)

HIGH README.md:52 — Potential secret: curl-auth-header (gitleaks)

Полный список: security-analysis/findings/pr-15/1787623525.json

🔴 Merge заблокирован — есть находки выше порога security-analysis/policy.yml.

## Security scan (Level 0) - **HIGH**: 3 **HIGH** `README.md:27` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:36` — Potential secret: curl-auth-header (gitleaks) **HIGH** `README.md:52` — Potential secret: curl-auth-header (gitleaks) Полный список: `security-analysis/findings/pr-15/1787623525.json` 🔴 **Merge заблокирован** — есть находки выше порога `security-analysis/policy.yml`.
playground-security-bot added 1 commit 2026-08-25 02:05:28 +00:00
security: scan results for PR #15
security / scan (pull_request) Skipped
Details
security / review (pull_request) Skipped
Details
security / deep-audit (pull_request) Skipped
Details
5cfc110bba
playground-security-bot commented 2026-08-25 02:06:55 +00:00
Collaborator
Copy Link
Copy Source

AI Security Review (Level 1)

Находок нет.
✅ Порог не превышен.

## AI Security Review (Level 1) Находок нет. ✅ Порог не превышен.
testclient-admin closed this pull request 2026-08-25 03:08:09 +00:00
testclient-admin deleted branch add-security-scanning 2026-08-25 03:08:09 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
checkout-coding checkout-review davinchi dev1-demo dev1-playground global-security newaget3 newtestagent playground-security-bot shared-ui-coding testclient-admin web-api-review web-api-security web-frontend-coding i.kologriv (Ирина Кологрив)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: i.kologriv/playground#15