* chore: add snyk-agent-scan workflow for skill security scanning
* chore: add snyk-agent-scan workflow and resolve scan findings
- Add GitHub Actions workflow for scanning skills on PRs and main
- Add scan_all_skills.sh for local full scans
- Add check_snyk_findings.py with skill-scoped ignore support
- Fix auth0-java-mvc-common and auth0-expo credential handling
- Fix auth0-cli to use env vars instead of literal secrets
- Add ignore entries for first-party Auth0 URLs (W012)
* chore: remove auth0-cli changes already merged via PR #85
* chore: add missing skills to snyk-agent-scan ignore entries
* chore: split snyk-agent-scan into one job per skill
Use a matrix strategy so each skill gets its own CI job,
improving failure reporting visibility in the GitHub Actions UI.
* chore: use skill path as matrix job name for clarity
* Revert "chore: use skill path as matrix job name for clarity"
This reverts commit 6dbaa88fb96a3afbc68201190fc8f1a2dd750236.
* Revert "chore: split snyk-agent-scan into one job per skill"
This reverts commit be9a74de9a87069d613f4a14e63d98c86506a345.
* Updates .snyk-agent-scan-ignore.json to allow accessing Auth0 URLs in the skills
* Chore/snyk agent scan refactor (#97)
* Consolidate GitHub releases API entries using url_pattern
* Drop skills field from entries to match any skill
* Ignores W012 for HomeBrew install script and CloudFlare MCP access on auth0-custom-domains
* Update trigger for snyk-agent-scan
* Update malformed link in snyk-agent-scan-ignore
* Address review comments
---------
Co-authored-by: Frederik Prijck <frederik.prijck@okta.com>
claudelint has been renamed to skillsaw (https://github.com/stbenjam/skillsaw).
- Rename .claudelint.yaml → .skillsaw.yaml
- Rename .claudelint/ → .skillsaw/ (custom rules directory)
- Remove stale rule IDs (commands-dir-required, commands-exist)
- Simplify imports in custom rules to use `from skillsaw import ...`
- Rename workflow claudelint.yml → skillsaw.yml
- Bump pinned version from claudelint 0.3.6 to skillsaw 0.4.2
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Frederik Prijck