peet and Claude Fable 5
ec5a498266
Use docker-archive for the Trivy scan export (oci-archive unsupported)
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg
2026-08-29 09:39:49 +02:00
peet and Claude Fable 5
5f499cd0ac
podman-build-publish: gate pushes on a Trivy vulnerability scan
...
New scan step between build and push: the built image is exported and
scanned with Trivy; fixable HIGH/CRITICAL findings fail the action and
block the push. Configurable via new scan / scan-severity inputs.
Implements noctrl.podman security review finding #16 (CI level).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg
2026-08-29 09:38:38 +02:00
peet
e80642a71e
revert 06fd1a015a
...
revert build isolation oci for arm64 builds
2026-06-14 13:59:15 +02:00
peet
06fd1a015a
build isolation oci for arm64 builds
2026-06-14 13:24:43 +02:00
peet
fa3f894736
podman storage driver overlayfs+fuse and vfs as fallback
2026-05-28 14:42:29 +02:00
peet
cb24d45011
credentials required
2026-05-28 00:44:22 +02:00
peet
78d9ca75f3
registry credentials optional
2026-05-27 16:20:25 +02:00
peet
316a41d231
podman manifest action
2026-05-26 19:25:25 +02:00
peet
b0ceee7e9b
push is optional now
2026-05-26 19:16:43 +02:00
peet
5ff1f840dc
fix github_env
2026-04-24 21:59:31 +02:00
peet
512d32e285
fix podman root
2026-04-24 21:55:34 +02:00
peet
201c1568df
fix registry authentication
2026-04-24 21:51:09 +02:00
peet
4a66d2b26d
Gitea Actions Podman build and push
2026-04-24 21:04:19 +02:00
peetandClaude Fable 5