docs: update README with GRC, detection and SAFE pentest overview (#10) #108

	name: ci

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	qa:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.11"

	- name: Install QA dependencies
	run: \|
	python -m pip install -U pip
	pip install ruff black mypy pandas openpyxl

	- name: Run Ruff
	run: ruff check .

	- name: Run Black (check only)
	run: black --check .

	- name: Run MyPy on RiskOps package
	run: \|
	mypy src/riskops

	build-artifacts:
	needs: qa
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.11"

	- name: Install build dependencies
	run: \|
	python -m pip install -U pip
	pip install pandas openpyxl

	- name: Generate Excel risk matrix
	run: python tools/csv2xlsx.py

	- name: Upload risk matrix artifact
	uses: actions/upload-artifact@v4
	with:
	name: risk-matrix-xlsx
	path: docs/reports/risk_matrix.xlsx

	security:
	needs: qa
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Install Syft
	run: \|
	curl -sSfL https://github.com/anchore/syft/releases/download/v0.41.0/syft_0.41.0_linux_amd64.tar.gz \
	\| sudo tar -xz -C /usr/local/bin

	- name: Install Trivy
	run: \|
	curl -sfL https://github.com/aquasecurity/trivy/releases/download/v0.35.0/trivy_0.35.0_Linux-64bit.tar.gz \
	\| sudo tar -xz -C /usr/local/bin

	- name: Run security checks
	run: bash tools/sec_checks.sh

Provide feedback