feat: add comprehensive security scanning and EditorConfig integration

- Add govulncheck, Snyk, and Trivy vulnerability scanning
- Create security workflow for automated scanning on push/PR/schedule
- Add gitleaks for secrets detection and prevention
- Implement EditorConfig linting with eclint and editorconfig-checker
- Update Makefile with security and formatting targets
- Create SECURITY.md with vulnerability reporting guidelines
- Configure Dependabot for automated dependency updates
- Fix all EditorConfig violations across codebase
- Update Go version to 1.23.10 to address stdlib vulnerabilities
- Add tests for internal/helpers package (80% coverage)
- Remove deprecated functions and migrate to error-returning patterns
- Fix YAML indentation in test fixtures to resolve test failures

internal/git/detector.go

@@ -62,6 +62,12 @@ func DetectRepository(repoRoot string) (*RepoInfo, error) {
 		return &RepoInfo{IsGitRepo: false}, nil
 	}
 
+	// Check if this is actually a git repository
+	gitPath := filepath.Join(repoRoot, ".git")
+	if _, err := os.Stat(gitPath); os.IsNotExist(err) {
+		return &RepoInfo{IsGitRepo: false}, nil
+	}
+
 	info := &RepoInfo{IsGitRepo: true}
 
 	// Try to get remote URL