Add security standards and CI infrastructure

Browse Source

- SECURITY.md with vulnerability disclosure policy and self-hosting guidance
- Dependabot config for weekly dependency updates (npm, Docker, Actions)
- ESLint v9 flat config for frontend and backend, with eslint-plugin-security
- GitHub Actions CI: lint, typecheck, build, and npm audit on every push/PR
- CodeQL workflow for automated security scanning (runs on push and weekly)

...

This commit is contained in:

2GT-Rich

2026-04-16 09:55:53 -07:00

parent ab9572122e

commit e43b80a9a2

10 changed files with 7727 additions and 53 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

backend/package-lock.json

Generated

+4300

File diff suppressed because it is too large Load Diff