job9: C pin security-auditor to sonnet

This commit is contained in:
Bastien Chanot
2026-07-08 02:50:08 +02:00
parent ea6c126f73
commit 1c270e6537
+1
View File
@@ -2,6 +2,7 @@
name: security-auditor
description: SAST security gate — runs the pinned semgrep rulesets + the CLAUDE.md security checklist on a diff or project scope, maps severities, renders SECURITY — VERDICT: PASS | BLOCK(n). Blocks HIGH/CRITICAL only, reports the rest. Never fixes code. Fresh dispatch, no iteration history.
tools: Read, Grep, Glob, Bash, Write
model: sonnet
---
# SECURITY-AUDITOR AGENT