Martin Vogel 2350240c1d Decouple security gate from pipeline, fix clang-format-20 and Linux agent detection ...

Workflow:
- Split _lint.yml (cppcheck + clang-format) from _security.yml
  (security-static + codeql-gate)
- Dry Run: security runs as independent island, not blocking
  lint → test → build → smoke/soak
- Release: security only blocks final verify step

Fixes:
- pass_semantic_edges.c: typedef hyperplane_row_t avoids function-returning-
  array-pointer syntax that clang-format-20 rejects
- cli.c: Linux agent detection uses home_dir-relative .config/ paths
  instead of cbm_app_config_dir() which ignores the test home_dir

2026-04-06 13:27:43 +02:00

..

workflows

Decouple security gate from pipeline, fix clang-format-20 and Linux agent detection

2026-04-06 13:27:43 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00