feat: add GitHub Actions workflows for code quality and automation (#2)

This commit is contained in:
2025-02-02 00:42:19 +02:00
committed by GitHub
parent af6ecdf6ca
commit 210aa969b3
105 changed files with 8807 additions and 408 deletions

22
supressions.xml Normal file
View File

@@ -0,0 +1,22 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<!-- Example suppression for a specific CVE -->
<suppress>
<notes>Description of why this vulnerability is suppressed</notes>
<cve>CVE-2023-12345</cve>
</suppress>
<!-- Example suppression for a specific package -->
<suppress>
<notes>Package is only used in development</notes>
<packageUrl regex="true">^pkg:npm/dev\-dependency@.*$</packageUrl>
<vulnerabilityName regex="true">.*</vulnerabilityName>
</suppress>
<!-- Example suppression based on CVSS score -->
<suppress>
<notes>Low severity issues in test dependencies</notes>
<cvssBelow>4.0</cvssBelow>
<packageUrl regex="true">^pkg:npm/test\-.*$</packageUrl>
</suppress>
</suppressions>