molecule-ai/molecule-core
35
0
Fork 2
Code Issues 16 Pull Requests 2 Actions 49 Packages Projects Releases Wiki Activity

Merge pull request #307 from Molecule-AI/fix/backend-engineer-security-scan

Browse Source 
feat(template): add molecule-security-scan to Backend Engineer (#303)
This commit is contained in:
Hongming Wang 2026-04-15 19:21:19 -07:00 committed by GitHub
commit 5c4146e09c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
org-templates/molecule-dev/org.yaml
View File

@ -512,7 +512,10 @@ workspaces:
# schema mutation without a human click. UNION with defaults.
# #280: molecule-skill-code-review — self-review rubric before
# raising a PR (same rubric Dev Lead applies in review).
plugins: [molecule-hitl, molecule-skill-code-review]
# #303: molecule-security-scan — CVE gate at dev time, not
# just at Security Auditor's 12h cron. Catches supply-chain
# deps + secret patterns before they reach PR review.
plugins: [molecule-hitl, molecule-skill-code-review, molecule-security-scan]
initial_prompt: |
You just started as Backend Engineer. Set up silently — do NOT contact other agents.
1. Clone the repo: git clone https://github.com/${GITHUB_REPO}.git /workspace/repo 2>/dev/null || (cd /workspace/repo && git pull)