ci(security): Semgrep SAST gate (report-only) (#1797)#1822

Draft

ktursunov wants to merge 5 commits into

mainfrom

semgrep-collection

Commits on Jul 17, 2026

ci(security): add report-only Semgrep SAST gate (#1797)

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ci(security): move Semgrep gate to Node-24 actions; robust JWT waiver

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ci(security): revert JWT inline waiver — keep #1797 CI-only

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ci(security): richer Semgrep job-summary (severity + per-rule breakdown)

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ci(security): broaden Semgrep to p/rust, p/csharp, p/python

Konstantin Tursunov
authored and
Konstantin Tursunov
committed