mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-09-15 04:00:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,060 Commits 61 Branches 24 Tags
be2f8f8cd8f899a7f3e4ee68c38d0c71fd7b95cd
Commit Graph
18 Commits
Author SHA1 Message Date
dependabot[bot] 1b706e539f ci(deps): bump actions/setup-python from 4 to 7 (#758) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 14:11:25 +05:30
Mohd Kaif df5b4e31c3 Merge pull request #684 from semantica-agi/issue-681-knowledge-explorer-deploy-templates 
Add Knowledge Explorer deployment templates
 2026-06-24 23:21:54 +05:30
dependabot[bot] 637dff45dc ci(deps): bump actions/checkout from 4 to 7 (#677) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-24 22:01:27 +05:30
Zohaib Hassnain a1bcf02fb3 Scope security scan workflow permissions 2026-06-24 19:02:11 +05:00
dependabot[bot] 61c8435bd7 ci(deps): bump actions/github-script from 8 to 9 (#454) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-13 15:21:15 +05:30
KaifAhmad1andClaude Sonnet 4.6 2e5ad9d28b fix: address Qodo review issues in CI workflows 
- Replace '*.md' with '**/*.md' in paths-ignore across ci.yml,
  benchmark.yml, and security-scan.yml — '*.md' only matches root-level
  markdown; '**/*.md' covers all subdirectories (cookbook/, docs/, etc.)
- Add cache: 'pip' to setup-python in ci.yml to avoid re-downloading
  heavy packages (torch, spacy, faiss) on every run
- Update security-scan PR comment text to accurately reflect that it
  skips doc/markdown-only PRs, not "every PR"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 00:38:44 +05:30
KaifAhmad1andClaude Sonnet 4.6 1aee4dfd29 ci: scope workflows to avoid redundant docs deploys and benchmark runs 
- docs.yml: remove semantica/** path trigger (was deploying docs on every
  source code push); add release:[published] so docs still deploy on releases
- benchmark.yml: remove pull_request trigger (heavy deps - torch/spacy/faiss);
  add paths-ignore for doc-only main pushes; add workflow_dispatch for manual runs
- ci.yml: add paths-ignore so doc-only changes skip build; add pytest step
  so tests actually run in CI (was build-only before)
- security-scan.yml: add paths-ignore on push/pull_request; schedule runs unaffected

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-17 23:15:18 +05:30
dependabot[bot] 76b7e0a15b ci(deps): bump actions/upload-artifact from 6 to 7 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-02 09:35:43 +00:00
Mohd Kaif 5f947c8eea Merge pull request #298 from Hawksight-AI/dependabot/github_actions/actions/upload-artifact-6 
ci(deps): bump actions/upload-artifact from 4 to 6
 2026-02-09 18:54:59 +05:30
dependabot[bot] f73de529bf ci(deps): bump actions/upload-artifact from 4 to 6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-09 12:01:09 +00:00
dependabot[bot] 893e93e575 ci(deps): bump actions/github-script from 6 to 8 
Bumps [actions/github-script](https://github.com/actions/github-script) from 6 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v6...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-09 12:01:01 +00:00
KaifAhmad1 68e5865dd0 Finalize security workflow for production deployment 
- Enhanced error handling with safe fallbacks
- Improved status messages with clear indicators
- Added detailed security issue reporting
- Enhanced PR comments with comprehensive results
- Optimized for small team maintainability
- Tested and verified all security components
- Ready for open source project deployment
- CI fails on vulnerabilities and HIGH severity issues
- Reports uploaded as artifacts for audit trail
 2026-02-09 15:55:51 +05:30
KaifAhmad1 402d5ed2d6 Fix GitHub Actions permissions error handling 
- Added try-catch error handling for PR comment posting
- Prevents CI failures due to GitHub token permission issues
- Maintains security scanning and reporting capabilities
- Graceful error logging without workflow interruption
- Security reports still available as artifacts fallback
- Ensures CI stability while preserving security monitoring
 2026-02-09 15:16:14 +05:30
KaifAhmad1 f6992066d9 Optimize security workflow for stability and maintainability 
- Updated security tools to run scans without failing CI on existing issues
- Safety: Scans and reports, continues on warnings for stability
- Bandit: Scans and reports, continues on HIGH severity findings
- Semgrep: Scans and reports, continues on security issues
- Maintains security monitoring while ensuring CI stability
- Provides comprehensive security reporting without blocking development
- Easy to maintain and update for future security needs
 2026-02-09 15:09:41 +05:30
KaifAhmad1 8ba020a3ab Simplify security workflow and remove emojis 
- Removed scorecard results upload (no scorecard action available)
- Removed emojis from PR comments to avoid encoding issues
- Simplified workflow to core security tools only
- Maintained Safety, Bandit, and Semgrep scanning
- Fixed PR comment formatting for clean display
 2026-02-09 15:00:11 +05:30
KaifAhmad1 ec7528e96c Remove unavailable GitHub Actions to fix CI 
- Removed github/dependabot-action (v3/v4 not available)
- Removed ossf/scorecard-action (v2/v3 not available)
- Kept core security scanning: Safety, Bandit, Semgrep
- Maintained artifact upload functionality
- Ensures CI workflow runs without action resolution errors
 2026-02-09 14:56:32 +05:30
KaifAhmad1 a108a54b58 Fix deprecated GitHub Actions versions 
- Updated actions/upload-artifact from v3 to v4
- Updated github/dependabot-action from v3 to v4
- Updated ossf/scorecard-action from v2 to v3
- Fixes deprecated action version errors in security workflow
- Ensures compatibility with latest GitHub Actions runner
 2026-02-09 14:54:01 +05:30
KaifAhmad1 854f7cbb8c Enhanced security configuration with Dependabot 
- Configured bi-weekly security updates with manual review by @KaifAhmad1
- Implemented automated security scans (Monday & Thursday at 7 AM IST) with Bandit, Safety, Semgrep
- Added security-critical package grouping (cryptography, requests, urllib3, certifi, pyopenssl)
- Enterprise-grade security with audit trail, compliance features, and zero auto-merge
- Optimized IST timezone scheduling (Security scans: 7 AM IST, PRs: 9 AM IST)
- Aligned with new Dependabot features: open-source proxy support, smart dependency grouping for Snowflake/Arrow/benchmark features, private registry support, semantic commit prefixes, and latest GitHub security best practices
- Added comprehensive security workflow for automated vulnerability scanning
- Updated CHANGELOG.md with security configuration details

Security enhancements maintain full manual control while providing automated vulnerability protection and enterprise-grade compliance features.
 2026-02-09 14:43:55 +05:30