[P0] **Repository and PR gates:** tighten ownership and workflow permissions; add dependency review, CodeQL, Zizmor/actionlint, secret scanning, push protection, and expiring exceptions. #2837

Activity

1. alangou

   added a parent issue on Aug 20, 2026

   • feat(security): establish continuous security assurance #2791
2. alangou

   self-assigned this

   on Aug 20, 2026
3. alangou

   linked a pull request that will close this issueci(security): add informational security checks #2930on Aug 25, 2026
4. github-project-automation

   added this to OpenShell Roadmapon Aug 27, 2026
5. github-project-automation

   moved this to Todo in OpenShell Roadmapon Aug 27, 2026
6. github-project-automation

   moved this from Todo to In progress in OpenShell Roadmapon Aug 27, 2026
7. alangou

   closed this as completedin #2930on Aug 27, 2026
8. github-project-automation

   moved this from In progress to Done in OpenShell Roadmapon Aug 27, 2026