ci: add ruff, pip-audit, CodeQL, and least-privilege permissions - #15

Open

KristianP26 wants to merge 7 commits into

DavidHruby1:mainfrom

KristianP26:ci/tooling

Commits on Jun 12, 2026

build: add ruff config (lint + format, line-length 100)
KristianP26
committed
b454642
style: remove unused imports and silence load-bearing unused binding
KristianP26
committed
ffad813
style: apply ruff format across the codebase
KristianP26
committed
c6d953f
ci: add ruff lint, format check, and pip-audit jobs with read-only permissions
KristianP26
committed
163edba
ci: add CodeQL static analysis workflow for Python
KristianP26
committed
e817972
docs: add CI tooling plan
KristianP26
committed
635e3b7
fix(security): mask secret fields in config CLI output (CodeQL clear-text logging)
KristianP26
committed
abb93db