From 0435e4c402e86639bf40d4ba619b02058d7ca6e1 Mon Sep 17 00:00:00 2001
From: testclient-admin <admin@testclient.local>
Date: Sun, 30 Aug 2026 07:34:57 +0000
Subject: [PATCH] Level 0: security scanning for pull requests

---
 security-analysis/policy.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 security-analysis/policy.yml

diff --git a/security-analysis/policy.yml b/security-analysis/policy.yml
new file mode 100644
index 0000000..1e294b0
--- /dev/null
+++ b/security-analysis/policy.yml
@@ -0,0 +1,7 @@
+# Какие находки блокируют merge. Читает security.yml на каждом
+# скане; отсутствие файла — те же значения по умолчанию.
+security:
+  block_on:
+    - critical
+    - high
+  min_confidence: 0.7