Joseph O'Brien 20d4bdda0e ci: add public repo readiness workflow ...

Checks on every push to main:
1. Secrets/PII scan via obfsck (standard level)
2. Hardcoded private IPs / internal hostnames
3. License compliance via cargo-deny (blocks GPL/AGPL)
4. Tracked secrets files (.env, .age, id_rsa, etc.)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 21:05:54 -04:00

4.7 KiB

Raw Blame History

View Raw