feat: Add security-analysis orchestrator for zizmor and checkov scanning - #42

Merged

ColinDaglish merged 30 commits into

mainfrom

Sep 9, 2026

Commits on Sep 7, 2026

feat: add Checkov workflow for infrastructure security scanning and update zizmor workflow run-name
ColinDaglish
committed
3a3c37f
feat: add persona input for zizmor analysis configuration
ColinDaglish
committed
245a8fe
feat: enable default SARIF upload to GitHub Advanced Security in zizmor workflow
ColinDaglish
committed
dbd77d7
fix: set default value of advanced-security input to true in zizmor workflow
ColinDaglish
committed
8ca830d
fix: remove duplicate branch specifications for pull_request and push in Checkov workflow
ColinDaglish
committed
2506b0c
refactor: remove workflow_dispatch inputs for issue and pull request workflows
ColinDaglish
committed
19d4033
fix: add missing checkov skip comment for internal implementation workflows
ColinDaglish
committed
7b3c57c
fix: update advanced-security input handling for public and private repositories in Checkov and zizmor workflows
ColinDaglish
committed
47db57f
chore: remove checkov config default value

ColinDaglish
and
Copilot
authored
dadedf8
chore: update settings so that public repo's can opt out.

ColinDaglish
and
Copilot
authored
334c073
feat: add config-path input to Checkov workflow and create default Checkov config file
ColinDaglish
committed
2e8c043
fix: standardize 'on' key formatting across workflow files
ColinDaglish
committed
2db177a
fix: clarify advanced-security input handling in Checkov and Zizmor workflows
ColinDaglish
committed
2dfb610
fix: update input handling for config-path and advanced-security in Checkov and Zizmor workflows
ColinDaglish
committed
fc940c5
fix: enhance advanced-security description in Checkov and Zizmor workflows for clarity
ColinDaglish
committed
ce7c961
fix: remove placeholder comments from Checkov configuration file
ColinDaglish
committed
d19870e
feat: add security analysis workflow with Checkov and Zizmor integration
ColinDaglish
committed
7ed8bf1
fix: remove unused pull_request and push triggers, and concurrency settings from Checkov, Security Analysis, and Zizmor workflows
ColinDaglish
committed
a9b97b7
fix: update config-path and advanced-security handling for Zizmor and Checkov jobs in security analysis workflow
ColinDaglish
committed
e13be80
fix: remove advanced-security input from Zizmor and Checkov jobs in security analysis workflow
ColinDaglish
committed
43fb16b
fix: update run-name format in security analysis workflow
ColinDaglish
committed
de1a7ee
docs: add security analysis workflow documentation and orchestration pattern
ColinDaglish
committed
21f4a02

Commits on Sep 9, 2026