Anthony Ettinger bfb536c894 ci: remove the vu1nz security scan (#127) ... vu1nz reviews a diff by calling Claude, which needs ANTHROPIC_API_KEY supplied through the ENV_FILE secret. That key is not present on this repository, so the scanner has never reviewed a pull request. On pack 1.0.0 and 1.0.1 that failure was silent: the job reported "0 finding(s), no high/critical issues" on a diff nothing had read, which is worse than no scanner at all. threatcrush-scan covers the same ground deterministically - credentials, injection, SSRF, unsafe deserialisation, XXE, dependency tampering - with no API key and no per-pull-request cost. Reinstallable from the sh1pt Actions Store if the key is ever provisioned. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>		2026-08-03 07:16:41 -07:00
..
workflows	ci: remove the vu1nz security scan (#127)	2026-08-03 07:16:41 -07:00
threatcrush-to-sarif.py	ci: add ThreatCrush security scan (#122)	2026-08-03 06:36:30 -07:00