Scheduled Security Scan

automationSecurity

Security scanning that only runs on PRs misses vulnerabilities introduced by dependency advisories published after a merge. A weekly CodeQL sweep plus a secret scan on every push keeps coverage continuous.

Delivery for this kind is on the roadmap — not serving yet. You can still add it. It stays paused until ahel can serve it.