orchestrator/docs/work-items/ORCH-111/17-security-report.md

security_status, secrets_found, deps_blocking, deps_warning, deps_audit_degraded

security_status	secrets_found	deps_blocking	deps_warning	deps_audit_degraded
PASS	0	0	4	false

Security Report — ORCH-111

Детерминированный security-гейт (ORCH-022): secret-scanning (gitleaks, offline) + dependency audit (pip-audit). Машинный вердикт читается ТОЛЬКО из frontmatter выше.

Verdict

clean: 0 secrets, 0 blocking CVE(s)

Secrets

• None

Dependencies (blocking)

• None

Dependencies (warning)

• pytest==8.3.3 — GHSA-6w46-j5rx-g56g severity=UNKNOWN fix=9.0.3
• starlette==0.38.6 — PYSEC-2026-161 severity=UNKNOWN fix=1.0.1
• starlette==0.38.6 — GHSA-f96h-pmfr-66vw severity=UNKNOWN fix=0.40.0
• starlette==0.38.6 — GHSA-2c2j-9gv5-cj73 severity=UNKNOWN fix=0.47.2