[APS-19017] fix: pin Semgrep CI image to sha256 digest - #1129

Open

Rohannagariya1 wants to merge 2 commits into

fix/APS-19017-supply-chain-hygiene

Commits on Sep 16, 2026

fix(security): supply-chain hygiene — mocha to devDeps, pin Semgrep image, add files allowlist [APS-19017]

authored and
Raghav11-11
committed
4015286

Commits on Sep 17, 2026

Revert mocha move: CVE already mitigated by serialize-javascript override; mocha bundling load-bearing for reporter/index.js:12 require
Raghav11-11
committed
38c4afd