feat: Add scan-community-node composite action - #2

Closed

bennycode wants to merge 10 commits into

mainfrom

scan-community-node

Commits on Sep 21, 2026

feat: Add scan-community-node composite action
bennycode
committed
a91227f
Pin Scorecard image, surface OSV-Scanner errors, guard fork PRs
bennycode
committed
f67dedc
Turn scan-community-node into a reusable workflow
bennycode
committed
5a421a0
Keep a scanned package from suppressing its own findings
bennycode
committed
baa2c7e
Make the report-only exit-code contract explicit for Semgrep and GuardDog
bennycode
committed
b7fe413
Split scan-community-node into per-scanner workflows and helper actions
bennycode
committed
a4da10f
Address review findings on the split workflows
bennycode
committed
cd980ad
Cover nested lockfiles and keep the upload path under test
bennycode
committed
7e6b8cf

Commits on Sep 22, 2026

Declare token permissions on the scan workflows
bennycode
committed
3b0fcaf
Keep the called workflows free of permission declarations
bennycode
committed
ad19d9f