Skip to content

ci(6dq): add G2 security scanning#4

Merged
nocoo merged 1 commit intomainfrom
chore/g2-compliance
Apr 20, 2026
Merged

ci(6dq): add G2 security scanning#4
nocoo merged 1 commit intomainfrom
chore/g2-compliance

Conversation

@nocoo
Copy link
Copy Markdown
Owner

@nocoo nocoo commented Apr 20, 2026

6DQ G2 Security Scanning Compliance

Adds G2 (security scanning) to meet 6DQ quality standard:

Changes

  • .gitleaks.toml — Secret detection configuration with test file allowlist
  • osv-scanner.toml — Dependency vulnerability scanner configuration
  • Pre-commit hook — Added gitleaks protect --staged (G2a) + typecheck if missing
  • Pre-push hook — Added osv-scanner scan (G2b)

6DQ Standard Reference

  • G2a (Secrets): gitleaks in pre-commit — zero tolerance for leaked secrets
  • G2b (Dependencies): osv-scanner in pre-push — scan lockfile for known CVEs
  • Benchmark: Zhe project (Tier S standard)

@cloudflare-workers-and-pages
Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
theme-matrix da2eb20 Commit Preview URL

Branch Preview URL
Apr 20 2026, 06:33 AM

@nocoo nocoo merged commit 561828e into main Apr 20, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant