chore: harden security scan and gate order

2026-06-09 18:12:03 +08:00
parent 997e1bf520
commit 47d9c60d48
3 changed files with 253 additions and 0 deletions
--- a/scripts/security_scan.sh
+++ b/scripts/security_scan.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$ROOT_DIR"
+
+python3 scripts/security_scan.py