Security Gates

Repository-facing security checks live in bijux-proteomics-dev so dependency policy and vulnerability enforcement are visible and reusable instead of being buried in workflow YAML.

The useful question is never “did security run somewhere.” The useful question is which checked-in helper or test is carrying the repository’s security expectation today.

Current Security Surfaces

• security/pip_audit_gate.py
• security/dependency_allowlist.py
• tests and workflow steps that execute those gates

Purpose

This page marks the boundary between maintainer security tooling and product-facing security behavior.

Stability

Keep it aligned with the executable checks and policies that actually exist.