🔒 Security & Quality Reports

📊 Latest Report

View the most recent security and quality assessment report generated from automated scans.

View Latest Report (HTML) Download Markdown

📚 Report Archive

Historical security reports are archived by date. Each report includes a complete snapshot of security posture at the time of generation.

Note: Reports are generated weekly on Sundays at 2:00 AM Victoria BC / Pacific (10:00 UTC PST, 09:00 UTC PDT).

Archive listing will be enhanced in a future update to automatically list all archived reports.

🔗 Quick Links

• 🔒 GitHub Security Tab - View all security alerts and detailed findings
• 📊 SonarCloud - Backend - Code quality metrics
• 📊 SonarCloud - Frontend - Code quality metrics
• ⚙️ Workflow Runs - View workflow execution history

ℹ️ About These Reports

Reports are generated automatically every Sunday at 2:00 AM Victoria BC / Pacific. Each report includes:

• Security Vulnerability Scans: ZAP Full Penetration Test, Nuclei Template-based Detection, CodeQL Static Analysis, Trivy Dependency & Container Scanning
• Code Quality Metrics: Test coverage, code quality scores from SonarCloud
• Dependency Health Status: Outdated package tracking
• Remediation Recommendations: Prioritized action items based on severity

Report Format: HTML (viewable in browser, printable to PDF) and Markdown (source format)

📋 Report Schedule

• Frequency: Weekly (Sundays)
• Time: 2:00 AM Victoria BC / Pacific — 10:00 UTC (PST) or 09:00 UTC (PDT)
• Archive: Retained indefinitely; workflow artifacts: 90 days
• Next Scan: Next Sunday at 2:00 AM Victoria BC / Pacific