🔒 ASH Monthly Security Report (2026-09-01)

# ASH Security Scan - Full Repository Report

**Scan Date:** 2026-09-01T02:18:23+00:00
**Trigger:** schedule
## Scanner Results

| Scanner | S | C | H | M | L | I | Time | Action | Result | Thresh |
|---------|---|---|---|---|---|---|------|--------|--------|--------|
| bandit | 0 | 0 | 0 | 0 | 270 | 0 | 2.3s | 0 | PASSED | MED (g) |
| cdk-nag | 0 | 0 | 0 | 0 | 0 | 0 | 9.6s | 0 | PASSED | MED (g) |
| cfn-nag | 0 | 0 | 0 | 0 | 0 | 0 | 387ms | 0 | PASSED | MED (g) |
| checkov | 0 | 0 | 0 | 0 | 0 | 0 | 9.7s | 0 | PASSED | MED (g) |
| detect-secr… | 0 | 8 | 0 | 0 | 0 | 0 | 3.6s | 8 | FAILED | MED (g) |
| grype | 0 | 0 | 0 | 0 | 0 | 0 | 54.7s | 0 | PASSED | MED (g) |
| npm-audit | 0 | 0 | 0 | 0 | 0 | 0 | 159ms | 0 | PASSED | MED (g) |
| opengrep | 0 | 27 | 0 | 0 | 0 | 0 | 21.8s | 27 | FAILED | MED (g) |
| semgrep | 0 | 0 | 0 | 0 | 0 | 0 | <1ms | 0 | MISSING | MED (g) |
| syft | 0 | 0 | 0 | 0 | 0 | 0 | 2.2s | 0 | PASSED | MED (g) |

---
*Auto-created by monthly security scan.*

No repository files, tests, or entry points are identified in the report. Start by reviewing the failed detect-secrets and opengrep results, then determine which findings are actionable; done would require resolving or explicitly dispositioning those findings and confirming the security scan passes.

Written by the indexing model from the issue text.