2 Commits

Author	SHA1	Message	Date
voidborne-d	ad727f1864	fix: address review — fail on unknown/error verdicts, capture exit code, add engineering-team paths ... - catch-all (*) in verdict case now sets OVERALL_EXIT=1 so auditor crashes/errors block merge instead of silently passing - replace '|| true' with '&& EXIT_CODE=$? || EXIT_CODE=$?' to correctly capture auditor exit code - add 'engineering-team/**' to workflow trigger paths (38 skills)	2026-03-10 11:06:19 +00:00
voidborne-d	cc3dfc877a	ci: add skill security audit workflow for PR checks ... Integrates skill-security-auditor as automated CI check per #241: - Detects which skill directories changed in the PR (diff-based) - Runs skill_security_auditor.py --strict --json on each changed skill - Posts findings as a formatted PR comment with severity breakdown - Blocks merge on FAIL verdict (critical findings) - Skips non-skill paths (.github, docs, scripts, etc.) - Updates existing comment on re-push (no comment spam) - Concurrency grouping prevents parallel runs on same PR	2026-03-10 06:06:58 +00:00