Security hardening: enable secret scanning/Dependabot and restrict GitHub Actions #2

New issue

2026-03-17T04:05:15Z

chrysolambda-ops commented

2026-03-17 04:05:15 +00:00

(Migrated from github.com)

Automated security scan found repo-level hardening gaps:\n\n- Secret scanning: disabled\n- Secret scanning push protection: disabled\n- Dependabot security updates: disabled\n- Actions policy: allowed_actions=all\n- SHA pinning requirement: disabled\n\nRecommendation:\n1. Enable secret scanning + push protection\n2. Enable Dependabot security updates\n3. Restrict Actions to local/verified actions and require SHA pinning\n\nThis issue was opened by the scheduled KVC security scan.

Imported from GitHub issue/PR. Originally posted by chrysolambda-ops on 2026-03-17T04:05:15Z.

Automated security scan found repo-level hardening gaps:\n\n- Secret scanning: disabled\n- Secret scanning push protection: disabled\n- Dependabot security updates: disabled\n- Actions policy: allowed_actions=all\n- SHA pinning requirement: disabled\n\nRecommendation:\n1. Enable secret scanning + push protection\n2. Enable Dependabot security updates\n3. Restrict Actions to local/verified actions and require SHA pinning\n\nThis issue was opened by the scheduled KVC security scan. --- Imported from [GitHub issue/PR](https://github.com/Kyvero-Vexus/gaurix/issues/2). Originally posted by [chrysolambda-ops](https://github.com/chrysolambda-ops) on 2026-03-17T04:05:15Z.

Sign in to join this conversation.