2 commits

Author	SHA1	Message	Date
Stefano Bertelli	31b31b7946	ci: exclude weak-sensitive-data-hashing rule from CodeQL ... API token hashing uses HMAC-SHA256 on high-entropy tokens (256-bit random), not passwords. Actual password hashing uses bcrypt.	2026-04-03 00:55:01 -05:00
Stefano Bertelli	aa38c3797e	ci: add security policy, CodeQL scanning, enable Dependabot	2026-04-03 00:35:42 -05:00