[StepSecurity] Apply security best practices
ST
19d ago+543+543+012345678901234567890123456789-0-0-0123456789
Summary
This pull request has been generated by StepSecurity as part of your enterprise subscription to ensure compliance with recommended security best practices. Please review and merge the pull request to apply these security enhancements.
Security Fixes
Recommended GitHub Actions Workflows
These workflows are part of the organization's recommended set and were previously missing from this repository.
Feedback
For bug reports, feature requests, and general feedback; please create an issue in step-security/secure-repo or contact us via our website.
Summary by cubic
Adds the organization's recommended security workflows so dependency review, vulnerability scanning, scorecard, and lint/format checks run on pull requests and the main branch.
New Features
- Dependency Review blocks PRs when dependencies exceed the configured severity threshold.
- OSV scanner checks
bun.lockfor vulnerabilities on PRs and the main branch, failing on new findings and uploading SARIF results to code scanning. - Scorecard runs on a schedule and on pushes to main, publishing results for public badge and code scanning.
- Lint and Format runs Prettier, markdownlint, and actionlint on changed files.