chore: fix compliance gaps surfaced by automated-assessment#75

Merged

CybotTM merged 16 commits intomainfrom

chore/compliance-fixes

Apr 17, 2026

Commits on Apr 16, 2026

chore: add governance files (SECURITY, CHANGELOG, CODEOWNERS, PR template)
CybotTM
committed
ci: add CodeQL, Scorecard, and dependency-review workflows
CybotTM
committed
chore: add pre-commit config (flake8, black, isort, shellcheck, hygiene)
CybotTM
committed
docs(readme): add CI, CodeQL, Codecov, Scorecard, license badges
CybotTM
committed
docs(agents): add Setup/Development/Testing/Architecture sections
CybotTM
committed
ci: add Security workflow (pip-audit, bandit, SBOM) + .gitignore vendor
CybotTM
committed
ci: add step-security/harden-runner to security scanners
CybotTM
committed
ci: remove codeql.yml; rely on default code-scanning setup
CybotTM
committed
docs(readme): drop CodeQL badge (workflow removed, default setup active)
CybotTM
committed
ci(security): install deps before pip-audit/SBOM, add bandit config
CybotTM
committed
chore: address PR #75 review feedback (minor fixes)
CybotTM
committed
test(bulk): use tempfile.gettempdir() in rollback-script assertion
CybotTM
committed