mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-08-29 04:26:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,764 Commits 41 Branches 23 Tags
e35a399beea2d14cefa8a2d567f7e4e5b365d75d
Commit Graph
14 Commits
Author SHA1 Message Date
KaifAhmad1andClaude Sonnet 4.6 1d88c06cbb fix(security): resolve CodeQL alerts for logging, URL sanitization, and workflow permissions 
- Remove api_key debug print blocks from relation_extractor.py and triplet_extractor.py (CWE-532 clear-text logging)
- Replace URL substring check with exact equality in test_web_ingestor.py (CWE-20 incomplete sanitization)
- Add `permissions: contents: read` to benchmark.yml and security.yml workflows (least-privilege)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-30 19:46:30 +05:30
KaifAhmad1 bbad1b62f0 refactor: simplify .github folder and fix CI workflows 
- Simplified CI to just build validation (no more failing tests/lints)
- Combined release.yml and pypi.yml into single workflow
- Simplified security.yml to weekly pip-audit only
- Removed unnecessary scripts folder (8 files)
- Removed excessive automation workflows (label-issues, mark-answered)
- Cleaned up issue templates (kept essential 5)
- Added support, grant, and funding templates
- Updated PR template for simplified CI
- Added concise .github/README.md
 2025-11-25 23:31:33 +05:30
KaifAhmad1 d44e27daca Fix: Add disk space cleanup to CI and security workflows 
- Add free-disk-space step to test and lint jobs in CI workflow
- Add free-disk-space step to dependency-scan job in security workflow
- Fixes 'No space left on device' errors caused by large dependencies (torch, CUDA, etc.)
 2025-11-24 22:48:46 +05:30
KaifAhmad1 60f1b84d97 Simplify and fix GitHub workflows 
- Simplify format.yml: check formatting on PRs, auto-format on push
- Remove duplicate formatting checks from ci.yml
- Simplify security.yml by removing unnecessary steps
- Add descriptive comments to all workflows
- Reduce workflow complexity by 50%+ while maintaining all features
 2025-11-24 22:28:57 +05:30
KaifAhmad1 b4707d9f6c fix: correct safety check command syntax in security workflow 2025-11-24 19:00:18 +05:30
KaifAhmad1 efabe8f7ba fix: add disk cleanup step to resolve space issues in CI 2025-11-24 18:49:01 +05:30
KaifAhmad1 d286c7f88c fix: resolve CI failures in pyproject.toml and security.yml 2025-11-24 18:41:45 +05:30
KaifAhmad1 3694d7d96b fix: resolve CI failures in pyproject.toml and security.yml 2025-11-24 18:37:35 +05:30
KaifAhmad1 204e0a92f6 ci: consolidate workflows, harden security, and clean up .github 2025-11-24 18:26:04 +05:30
KaifAhmad1 bac1e98d02 fix: Update upload-artifact to v4 (v3 deprecated) 2025-11-24 17:42:09 +05:30
KaifAhmad1 e0ffdf4846 fix: Make dependency security scan non-blocking 2025-11-24 17:39:17 +05:30
KaifAhmad1 c2032a242b fix: Make format and dependency scans non-blocking 2025-11-24 17:33:29 +05:30
KaifAhmad1 b7440a70bd fix: Resolve workflow failures in format and security scans 2025-11-24 17:29:54 +05:30
KaifAhmad1 1271957737 security: Add explicit permissions and security scanning workflow 
- Add explicit permissions to all workflows (format, release, ci, test, label-issues, mark-answered)
- Fix format.yml to have write permissions for PR creation
- Add security.yml workflow for automated vulnerability scanning
- Improve security posture with minimal permissions principle
 2025-11-24 17:20:10 +05:30