Compare commits

...

3 Commits

Author SHA1 Message Date
Hongming Wang
e952bc5693 docs(readme): cross-reference CLAUDE.md for multi-agent architecture
Some checks failed
CI / validate (push) Failing after 0s
2026-05-01 20:06:31 -07:00
Hongming Wang
d6b72118c6
Merge pull request #8 from Molecule-AI/chore/enroll-secret-scan
chore(ci): enroll in org-wide secret-scan reusable workflow (Molecule-AI/molecule-core#2109)
2026-04-29 13:45:42 -07:00
rabbitblood
b56ff1f532 chore(ci): enroll in org-wide secret-scan reusable workflow (Molecule-AI/molecule-core#2109) 2026-04-26 20:09:12 -07:00
2 changed files with 25 additions and 0 deletions

22
.github/workflows/secret-scan.yml vendored Normal file
View File

@ -0,0 +1,22 @@
name: Secret scan
# Calls the canonical reusable workflow in molecule-core. Defense
# against the #2090-class leak (a hosted-agent commit slipping a
# credential-shaped string into a PR). Pattern set lives in
# molecule-core so we do not maintain a parallel copy here.
#
# Pinned to @staging because that is the active default branch on the
# upstream repo (main lags behind via the staging-promotion workflow).
# Updates ride along automatically as the upstream regex set evolves.
on:
pull_request:
types: [opened, synchronize, reopened]
push:
branches: [main, staging, master]
merge_group:
types: [checks_requested]
jobs:
secret-scan:
uses: Molecule-AI/molecule-core/.github/workflows/secret-scan.yml@staging

View File

@ -22,3 +22,6 @@ github://Molecule-AI/template-deepagents
## License
Business Source License 1.1 — © Molecule AI.
## See also
For the multi-agent architecture (orchestrator + task agents, file-based coordination via `/workspace/agent-shared/`), the full `config.yaml` schema, environment variables, skill loading rules, dev setup, and release process, see [`CLAUDE.md`](CLAUDE.md).