From 94839a618784fc000b1bb0387eb76a963deaeb69 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=98=A3=EF=B8=8F=20Mr=2E=20The=20Plague=20=E2=98=A3?=
 =?UTF-8?q?=EF=B8=8F?= <3779295+DotNetRussell@users.noreply.github.com>
Date: Sat, 1 Aug 2026 08:07:34 -0400
Subject: [PATCH 1/2] chore: set SquidGate model to grok-build-0.1

---
 .github/squidgate.yml | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 .github/squidgate.yml

diff --git a/.github/squidgate.yml b/.github/squidgate.yml
new file mode 100644
index 0000000..546132c
--- /dev/null
+++ b/.github/squidgate.yml
@@ -0,0 +1,37 @@
+# SquidGate — PR security gate
+# https://github.com/SquidSec/SquidGate
+version: 1
+
+llm:
+  provider: custom
+  model: grok-build-0.1
+
+policy:
+  block_on: high
+  min_confidence: medium
+  categories:
+    secrets: true
+    injection: true
+    authn_authz: true
+    cryptography: true
+    insecure_deserialization: true
+    path_traversal: true
+    ssrf: true
+    xss: true
+    csrf: true
+    supply_chain: true
+    hardcoded_credentials: true
+    dangerous_functions: true
+    misconfiguration: true
+  custom_rules: []
+
+context:
+  lines_before: 30
+  lines_after: 30
+  max_files: 50
+  max_diff_bytes: 500000
+
+output:
+  comment_on_pr: true
+  annotate_lines: true
+  fail_on_error: true

From 86efad3517c493bafb7b58db97400c1ccd9558a0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=98=A3=EF=B8=8F=20Mr=2E=20The=20Plague=20=E2=98=A3?=
 =?UTF-8?q?=EF=B8=8F?= <3779295+DotNetRussell@users.noreply.github.com>
Date: Sat, 1 Aug 2026 08:07:35 -0400
Subject: [PATCH 2/2] chore: SquidGate workflow uses grok-build-0.1

---
 .github/workflows/squidgate.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/workflows/squidgate.yml

diff --git a/.github/workflows/squidgate.yml b/.github/workflows/squidgate.yml
new file mode 100644
index 0000000..c224155
--- /dev/null
+++ b/.github/workflows/squidgate.yml
@@ -0,0 +1,26 @@
+name: SquidGate
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+  checks: write
+
+jobs:
+  squidgate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: SquidGate
+        uses: SquidSec/SquidGate@v1
+        with:
+          llm-api-key: ${{ secrets.LLM_API_KEY }}
+          llm-provider: custom
+          llm-model: grok-build-0.1
+          llm-base-url: https://api.x.ai/v1