[dev] [tofikwest] tofik/fix-github-integration-sanitized

[github-actions]

This is an automated pull request to merge tofik/fix-github-integration-sanitized into dev.
It was created by the [Auto Pull Request] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
app	Ready	Preview, Comment	Jan 9, 2026 8:46pm

1 Skipped Deployment

Project	Deployment	Review	Updated (UTC)
portal	Skipped		Jan 9, 2026 8:46pm

[cursor]

PR Summary

Improves the GitHub "Sanitized Inputs & Code Scanning" check to more reliably detect and report code scanning configuration.

• Adds multi-method detection for code scanning: default setup API + workflow scanning via patterns in .github/workflows/*.yml (including third-party SARIF uploads)
• Introduces getCodeScanningStatus with statuses: enabled (default-setup/workflow), not-configured, permission-denied, and ghas-required; uses these to emit tailored pass/fail results
• Enhances evidence in pass results with languages/workflow, and clarifies remediation for GHAS-required and permission issues
• Keeps validation scan (Zod/Pydantic) logic but improves failure evidence with checked files
• Updates GitHubRepo type to include security_and_analysis.advanced_security for GHAS checks

^{Written by Cursor Bugbot for commit d927671. This will update automatically on new commits. Configure here.}