feat: security review github action#5

Open

shashank-factory wants to merge 25 commits intodevfrom

ssharma/security-review-github-action

Commits on Dec 29, 2025

Commits on Jan 2, 2026

Commits on Jan 3, 2026

fix: address review feedback for security scan
shashank-factory
committed
fix: correct skills paths from security/ to skills/ in Factory-AI/skills repo
shashank-factory
committed
feat: change @droid security-review command to @droid security
shashank-factory
committed
feat: show 'running a security check' message for security commands
shashank-factory
committed
feat: consolidate review output to single tracking comment
shashank-factory
committed
feat: add modular composite actions for parallel review workflow
shashank-factory
committed
fix: allow parallel automatic code and security reviews
shashank-factory
committed
fix: simplify detect step to use prepare outputs
shashank-factory
committed
fix: each job obtains its own GitHub token via OIDC
shashank-factory
committed
fix: use heredoc format for multi-line GITHUB_OUTPUT
shashank-factory
committed
fix: use core.setOutput instead of manual GITHUB_OUTPUT writing
shashank-factory
committed
fix: exclude MCP tools from --enabled-tools flag
shashank-factory
committed
feat: separate inline comments to finalize step to avoid overlaps
shashank-factory
committed
fix: remove github_pr___submit_review from combine step to prevent duplicate summaries
shashank-factory
committed
fix: use 'Code review completed' title for combined summary
shashank-factory
committed
feat: add @droid review/security command triggers for parallel workflow
shashank-factory
committed

Commits on Jan 7, 2026

Commits on Jan 13, 2026

merged dev
shashank-factory
committed