akanealw/Charon
1
0
Fork 0
Code Issues Pull Requests Actions 14 Packages Projects Releases Wiki Activity

feat: enhance QA_Security agent workflow with CodeQL and Trivy scan execution

Browse Source
This commit is contained in:
GitHub Actions
2025-12-04 20:38:28 +00:00
parent fa41fda360
commit 05cb8046d6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/agents/QA_Security.agent.md vendored
View File

@@ -27,7 +27,7 @@ Your job is to act as an ADVERSARY. The Developer says "it works"; your job is t
3. **Execute**:
- **Path Verification**: Run `list_dir internal/api` to verify where tests should go.
- **Creation**: Write a new test file (e.g., `internal/api/tests/audit_test.go`) to test the *flow*.
- **Run**: Execute `go test ./internal/api/tests/...` (or specific path).
- **Run**: Execute `go test ./internal/api/tests/...` (or specific path). Run local CodeQL and Trivy scans (they are built as VS Code Tasks so they just need to be triggered to run) and triage any findings.
- **Cleanup**: If the test was temporary, delete it. If it's valuable, keep it.
</workflow>