also looking at this

Gate releases on shipped artifact findings

#316

Merged glennmichael123 wants to merge codex/gate-shipped-artifacts into main

11 files +454 -25

.github/workflows/ci.ymlmodified+1-1

Changes to .github/workflows/ci.yml
		@@ -278,7 +278,7 @@ jobs:
278	278	run: zig fmt --check src/ build.zig
279	279
280	280	- name: Test failure-safe vulnerability scanning
281		run: bun test scripts/scan-sbom.test.ts
	281	run: bun test scripts/scan-sbom.test.ts scripts/scan-release-artifacts.test.ts
282	282
283	283	- name: Audit Zig C imports
284	284	run: bun run verify:cimports