From 99a32f93b8f76f90fc40530c4d2f21ea7fea8410 Mon Sep 17 00:00:00 2001
From: abir-vim <abir@getvim.com>
Date: Tue, 28 Jul 2026 12:53:03 +0300
Subject: [PATCH] chore(security): block merge on high-severity scanner
 findings

---
 .github/workflows/security.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 15626f2..3b5475c 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -288,7 +288,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           REPO: ${{ github.repository }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
-          BLOCK_ON_SEVERITY: critical
+          BLOCK_ON_SEVERITY: high
           SCAN_OK: ${{ steps.validate.outputs.scan_ok }}
           SCAN_REASON: ${{ steps.validate.outputs.reason }}
         run: |
@@ -414,7 +414,7 @@ jobs:
         env:
           # Block when a finding at or above this severity is present.
           # One of: critical | high | medium | low | none. 'none' = advisory only.
-          BLOCK_ON_SEVERITY: critical
+          BLOCK_ON_SEVERITY: high
           SCAN_OK: ${{ steps.validate.outputs.scan_ok }}
           SCAN_REASON: ${{ steps.validate.outputs.reason }}
         run: |