From 487a6e37c4cd336503818d73d85e7dd4cce68ca3 Mon Sep 17 00:00:00 2001
From: askalf <263217947+askalf@users.noreply.github.com>
Date: Sun, 12 Jul 2026 11:31:42 -0400
Subject: [PATCH] docs: add CI and CodeQL status badges to the README

The README already shows the OpenSSF Scorecard badge; add the CI (ci.yml) and
CodeQL (codeql.yml) workflow status badges next to it so the build + static
analysis health is visible at a glance alongside the supply-chain score.
---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index a626f66..80db9e3 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # agent-security-stack
 
+[![CI](https://github.com/askalf/agent-security-stack/actions/workflows/ci.yml/badge.svg)](https://github.com/askalf/agent-security-stack/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/askalf/agent-security-stack/actions/workflows/codeql.yml/badge.svg)](https://github.com/askalf/agent-security-stack/actions/workflows/codeql.yml)
 [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/askalf/agent-security-stack?label=OpenSSF%20Scorecard)](https://scorecard.dev/viewer/?uri=github.com/askalf/agent-security-stack)
 
 > _**Own your agent security.**_ The open-source agent-security suite — **[redstamp](https://github.com/askalf/redstamp) · [truecopy](https://github.com/askalf/truecopy) · [strongroom](https://github.com/askalf/strongroom)** — three tools that compose into one layered defense for every agent tool call, exposed as one MCP server. Part of **[Own Your Stack](https://github.com/askalf)**.