Added Security Check

[hrx01-dev]

Description

• Added Security check to aautomate and report any security issue

Summary by CodeRabbit

• New Features

  • Added automated repository-wide security auditing on a recurring schedule and through manual or code-change triggers.
  • Added security checks for dependency vulnerabilities, exposed secrets, insecure code patterns, and configuration issues.
  • Security results are available in Markdown and JSON formats.

• Bug Fixes

  • Added automated reporting of detected security risks, including severity levels and available remediation information.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
servio	Ready	Preview, Comment	Jul 27, 2026 2:05pm

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 26fac98e-7580-48e9-a8a3-cc72e65d0677

📥 Commits

Reviewing files that changed from the base of the PR and between 481f0ef and fc49f49.

📒 Files selected for processing (6)

• .github/workflows/security-check.yml
• .gitignore
• package.json
• scripts/run-security-check.mjs
• security-reports/security-report.json
• security-reports/security-report.md

---

📝 Walkthrough

Walkthrough

Adds a repository-wide security audit runner covering dependencies, secrets, SAST, and configuration. It generates JSON and Markdown reports, exposes an npm command, and runs automatically through GitHub Actions with artifact upload and report commits.

Changes

Security audit automation

Layer / File(s)	Summary
Audit collection and detection scripts/run-security-check.mjs	Defines repository traversal, npm vulnerability parsing, secret and SAST rules, source scanning, and configuration checks.
Report generation and status control scripts/run-security-check.mjs, security-reports/security-report.json, security-reports/security-report.md	Aggregates findings into PASS/WARNING/FAIL status and writes structured JSON and Markdown reports containing dependency, secret, SAST, and configuration results.
Command and workflow integration package.json, .github/workflows/security-check.yml, .gitignore	Adds the security:check npm command and configures scheduled, manual, push, and pull-request execution with report artifacts and repository updates.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
  participant GitHubActions
  participant npmScript
  participant SecurityAudit
  participant SecurityReports
  participant GitRepository
  GitHubActions->>npmScript: run npm run security:check
  npmScript->>SecurityAudit: execute audit runner
  SecurityAudit->>SecurityReports: write JSON and Markdown reports
  GitHubActions->>SecurityReports: upload report artifacts
  GitHubActions->>GitRepository: commit and push security reports

Loading

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/Added-Security-Check-workflow

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install timed out. The project may have too many dependencies for the sandbox.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Visit the preview URL for this PR (updated for commit fc49f49):

https://servio-0--pr281-feat-added-security-xouqi58u.web.app

_{(expires Mon, 03 Aug 2026 14:06:42 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: 15915abb5951eb298a844eda460b24f444d93a69}