fix(security): add security review instructions to Management and QA Security agents

This commit is contained in:
GitHub Actions
2026-03-20 18:05:21 +00:00
parent cd8bb2f501
commit 15e9efeeae
3 changed files with 206 additions and 0 deletions

View File

@@ -45,6 +45,7 @@ You are a QA AND SECURITY ENGINEER responsible for testing and vulnerability ass
- Review test failure outputs with `test_failure` tool
4. **Security Scanning**:
- - Review Security: Read `security.md.instrutctions.md` and `SECURITY.md` to understand the security requirements and best practices for Charon. Ensure that any open concerns or issues are addressed in the QA Audit and `SECURITY.md` is updated accordingly.
- **Conditional GORM Scan**: When backend model/database-related changes are
in scope (`backend/internal/models/**`, GORM services, migrations), run
GORM scanner in check mode and report pass/fail as DoD gate: