Skip to content

Conversation

@shashank-factory
Copy link
Contributor

@shashank-factory shashank-factory commented Jan 21, 2026

Summary

Updates the README documentation to add comprehensive documentation for the new @droid security workflow, including STRIDE-based security reviews and full repository security scans.

Changes

  • Added documentation for two new @droid commands:
    • @droid security — performs automated security review using STRIDE methodology
    • @droid security --full — performs full repository security scans and creates a PR with findings
  • Rewrote the droid-review.yml example workflow to demonstrate parallel code and security reviews:
    • New prepare job that outputs run_code_review and run_security_review flags
    • Separate code-review and security-review jobs that run in parallel
    • New combine job that aggregates results from both reviews
  • Added new configuration tables:
    • Core Inputs: factory_api_key, github_token
    • Review Configuration: automatic_review, review_model, fill_model
    • Security Configuration: automatic_security_review, security_model, security_severity_threshold, security_block_on_critical, security_block_on_high, security_notify_team, security_scan_schedule, security_scan_days
  • Added "Security Skills" section documenting Factory skills used for security reviews
  • Updated action version references from @main to @v1
  • Added troubleshooting note about security review deduplication

Testing

Documentation-only changes. No code changes requiring testing.

Related Issues

N/A

@shashank-factory shashank-factory merged commit 1de7a91 into dev Jan 21, 2026
@shashank-factory shashank-factory deleted the ssharma/readme-changes branch January 21, 2026 23:16
@factory-droid
Copy link
Contributor

factory-droid bot commented Jan 21, 2026

Droid finished @shashank-factory's task —— View job


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants