mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-08-29 04:26:20 +00:00
KaifAhmad1andClaude Sonnet 4.6
1d88c06cbb
- Remove api_key debug print blocks from relation_extractor.py and triplet_extractor.py (CWE-532 clear-text logging) - Replace URL substring check with exact equality in test_web_ingestor.py (CWE-20 incomplete sanitization) - Add `permissions: contents: read` to benchmark.yml and security.yml workflows (least-privilege) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
22 lines
371 B
YAML
22 lines
371 B
YAML
name: Security
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 0 * * 1'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: '3.11'
|
|
- run: pip install pip-audit
|
|
- run: pip-audit
|
|
continue-on-error: true
|