Feat (ci-rules) : Add AZ-CI-001..004 CI/CD workflow security rules (issue #259 PR 1/3) - #280

Open

emon22-ts wants to merge 5 commits into

emon22-ts:feat/259-ci-workflow-rules

Commits on Sep 13, 2026

feat(ci-rules): add AZ-CI-001..004 CI/CD workflow security rules (issue #259 PR 1/3)
emon22-ts
committed
7182ee2
fix: evaluate job-level permissions in is_permissions_broad and add regression tests
emon22-ts
committed
c88e675
fix: add CI scan entry point, workflow_run detection and UNKNOWN permissions handling
emon22-ts
committed
e3bc363
fix: cache workflow content, fix finding path matching, log app token exception
emon22-ts
committed
20d32ed
fix: move nosemgrep suppression to logger.error line in _get_app_token
emon22-ts
committed
43e5c88