From b3dafeae512fb9a69a970c4b5314ae4d4c42bbea Mon Sep 17 00:00:00 2001
From: All Asmaul Husnain <2263081025@uttarauniversity.edu.bd>
Date: Sat, 24 Oct 2026 15:00:01 +0600
Subject: [PATCH] docs: document Python test matrix and CI checks

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 3cb46ef..0cfd196 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@ Vault API is a hands-on way to study the full lifecycle of a sensitive backend r
 
 ## Stack
 
-* Python 3.12
+* Python 3.12+ (CI tested on 3.12, 3.13, and 3.14)
 * FastAPI
 * PostgreSQL
 * SQLAlchemy 2
@@ -234,7 +234,7 @@ Run static checks with Ruff:
 ruff check .
 ```
 
-Tests cover password hashing, token handling, configuration validation, encryption and key rotation, duplicate registration, invalid credentials, database health, secret CRUD operations, owner isolation, and request schema validation. GitHub Actions runs Ruff and the PostgreSQL-backed test suite for pushes to `main` and pull requests.
+Tests cover password hashing, token handling, configuration validation, encryption and key rotation, duplicate registration, invalid credentials, database health, secret CRUD operations, owner isolation, and request schema validation. CI runs Ruff, `pip-audit`, Docker image and Compose validation, and the PostgreSQL-backed test suite on Python 3.12, 3.13, and 3.14. CodeQL analyzes the Python code on pushes to `main` and pull requests targeting `main`.
 
 ## Current limitations