FYI: This adds an MCP security scan workflow using TheodorNEngoy/mcp-safety-scanner@v0 (no secrets). It runs against src/ with a checked-in baseline to avoid legacy noise, and fails CI only on new high-severity findings.\n\nHappy to adjust the baseline scope or pin to a specific tag if you prefer.

Update: I pinned the workflow to an immutable commit SHA for supply-chain safety (commented with the corresponding version), and set for a read-only token.

(clarification) Also set GitHub Actions workflow permissions to contents: read (read-only GITHUB_TOKEN).

FYI: I also opened #3303 to remove the current high-severity findings in the baseline (wildcard CORS in the Everything server HTTP transports). If/when that lands, we can regenerate the baseline to drop those entries (and likely keep only the remaining medium ones).

Update: bumped scanner pin to v0.4.9 (false-positive reductions) and regenerated .mcp-safety-baseline.json using baseline v2 fingerprints (includes line/column) to avoid over-suppressing future findings.