Zero-CVE Supply Chain, SLSA v1.0 & 9 Compliance Packs

8/8 Automated Security Gates

$ bun run security:audit
PASS  bun-audit        0 vulnerabilities across 1,008 packages
PASS  sbom-verify      CycloneDX 1.6 SBOM verified (1,073 components)
PASS  osv-scanner      0 vulnerabilities across lockfile and 4 container images
PASS  gitleaks         0 hardcoded secrets across working tree & git history
PASS  shellcheck       0 warnings across all shell scripts
PASS  ruff-security    0 Bandit S-rules issues across Python SDK
PASS  hadolint         0 issues across all Containerfiles
PASS  actionlint       0 issues across CI workflows