* feat: add Dependabot configuration for GitHub Actions, npm, and pip updates
feat: implement CodeQL analysis workflow for security scanning
fix: update permissions in community advisory workflow for better access control
fix: adjust permissions in poll NVD CVEs workflow for enhanced functionality
fix: update Scorecard workflow to use specific version of upload-sarif action
fix: refine permissions in skill release workflow for improved security and functionality
* feat: add guidance documentation for agents and development setup
* Update .github/workflows/codeql.yml
Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com>
---------
Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com>
This workflow analyzes the supply-chain security of the repository using Scorecard and uploads the results.
Co-authored-by: davida-ps <david.a@prompt.security>
davida-ps
Zvika Ronen