Add dynamic vulnerability badge to README

Badge color changes based on count: green (0), yellow (1-3), red (4+).
Updated via gh API in the badge update workflow.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: aksOps

README.md

@@ -19,6 +19,7 @@
   <a href="https://github.com/RandomCodeSpace/code-iq/security"><img src="https://img.shields.io/badge/security-audited-purple?style=flat-square&logo=shieldsdotio&logoColor=white" alt="Security"></a>
   <a href="https://github.com/RandomCodeSpace/code-iq/security/dependabot"><img src="https://img.shields.io/github/dependabot/RandomCodeSpace/code-iq?style=flat-square&logo=dependabot&logoColor=white&label=Dependabot" alt="Dependabot"></a>
   <a href="https://github.com/RandomCodeSpace/code-iq/security/code-scanning"><img src="https://img.shields.io/github/actions/workflow/status/RandomCodeSpace/code-iq/codeql.yml?branch=main&style=flat-square&logo=github&label=CodeQL" alt="CodeQL"></a>
+  <!-- DYNAMIC:vulnerabilities --><a href="https://github.com/RandomCodeSpace/code-iq/security/dependabot"><img src="https://img.shields.io/badge/vulnerabilities-1-yellow?style=flat-square&logo=hackthebox&logoColor=white" alt="1 Vulnerabilities"></a><!-- /DYNAMIC:vulnerabilities -->
   <!-- DYNAMIC:detectors --><a href="https://github.com/RandomCodeSpace/code-iq"><img src="https://img.shields.io/badge/detectors-58-brightgreen?style=flat-square&logo=codefactor&logoColor=white" alt="58 Detectors"></a><!-- /DYNAMIC:detectors -->
   <!-- DYNAMIC:languages --><a href="https://github.com/RandomCodeSpace/code-iq"><img src="https://img.shields.io/badge/languages-33-blue?style=flat-square&logo=stackblitz&logoColor=white" alt="33 Languages"></a><!-- /DYNAMIC:languages -->
   <!-- DYNAMIC:tests --><a href="https://github.com/RandomCodeSpace/code-iq"><img src="https://img.shields.io/badge/tests-113%20passed-brightgreen?style=flat-square&logo=pytest&logoColor=white" alt="113 passed Tests"></a><!-- /DYNAMIC:tests -->

scripts/update_readme_badges.py

@@ -3,6 +3,7 @@
 
 from __future__ import annotations
 
+import json
 import re
 import subprocess
 import sys
@@ -56,6 +57,17 @@ def count_detectors_and_languages() -> tuple[int, int]:
     return int(parts[0]), int(parts[1])
 
 
+def count_vulnerabilities() -> int:
+    """Count open Dependabot alerts via gh CLI (requires repo access)."""
+    try:
+        out = _run(["gh", "api", "repos/RandomCodeSpace/code-iq/dependabot/alerts?state=open&per_page=100"])
+        alerts = json.loads(out)
+        return len(alerts) if isinstance(alerts, list) else 0
+    except Exception:
+        # Fallback: try GITHUB_TOKEN env var or return -1 to skip update
+        return -1
+
+
 def fmt(n: int) -> str:
     """Format number with commas for display, URL-encoded."""
     return f"{n:,}"
@@ -64,8 +76,11 @@ def fmt(n: int) -> str:
 def badge(label: str, value: str, color: str, logo: str) -> str:
     """Generate a shields.io badge HTML snippet."""
     val_encoded = quote(value, safe="")
+    link = "https://github.com/RandomCodeSpace/code-iq"
+    if label == "vulnerabilities":
+        link += "/security/dependabot"
     return (
-        f'<a href="https://github.com/RandomCodeSpace/code-iq">'
+        f'<a href="{link}">'
         f'<img src="https://img.shields.io/badge/{label}-{val_encoded}-{color}'
         f'?style=flat-square&logo={logo}&logoColor=white" alt="{value} {label.capitalize()}">'
         f"</a>"
@@ -86,12 +101,14 @@ def main() -> None:
     loc = count_loc()
     tests = count_tests()
     detectors, languages = count_detectors_and_languages()
+    vulns = count_vulnerabilities()
 
     print(f"  Files: {files}")
     print(f"  LOC: {loc:,}")
     print(f"  Tests: {tests}")
     print(f"  Detectors: {detectors}")
     print(f"  Languages: {languages}")
+    print(f"  Vulnerabilities: {vulns if vulns >= 0 else 'skipped (no access)'}")
 
     content = README.read_text()
     original = content
@@ -116,6 +133,13 @@ def main() -> None:
         content, "loc",
         badge("LOC", fmt(loc), "informational", "codacy"),
     )
+    if vulns >= 0:
+        vuln_color = "brightgreen" if vulns == 0 else "yellow" if vulns <= 3 else "red"
+        vuln_label = "0 - clean" if vulns == 0 else str(vulns)
+        content = update_badge(
+            content, "vulnerabilities",
+            badge("vulnerabilities", vuln_label, vuln_color, "hackthebox"),
+        )
 
     if content != original:
         README.write_text(content)