mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-10-05 16:32:15 +00:00
Adam Moussa
4c88c01f7b
Fresh-init copy of the security-review/ subsystem extracted from Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold: CI reusable-workflow callers (ruff + collect), dependency-review, labeler, dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and nightly_sweep.sh/checker_coordinator.sh remain the source of truth. Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry intentional secret-shaped test data that trips the deterministic gate (the documented detector-fixture false positive); no new logic is introduced.
21 lines
601 B
JSON
21 lines
601 B
JSON
{
|
|
"checker": "doc-drift",
|
|
"generated": "2026-06-17T03:10:00Z",
|
|
"org": "Sea-Haven-Industries",
|
|
"repos_scanned": 1,
|
|
"drift_count": 1,
|
|
"repos_with_drift": 1,
|
|
"findings": [
|
|
{
|
|
"repo": "payments-dashboard",
|
|
"id": "payments-dashboard-readme-stale-arch",
|
|
"title": "README architecture section predates the new Lambda; docs lag code",
|
|
"severity": "medium",
|
|
"category": "other",
|
|
"check": "readme-stale",
|
|
"status": "confirmed",
|
|
"proof": {"outcome": "git log shows handler change after the README's last edit"}
|
|
}
|
|
],
|
|
"skipped_checks": []
|
|
}
|