Trivy scan gate #1

Merged

peet merged 2 commits from trivy-scan-gate into main 2026-08-29 09:58:37 +02:00

Conversation 0 Commits 2 Files Changed 2

+56

peet commented 2026-08-29 09:58:25 +02:00

Owner

Copy link

Copy source

No description provided.

peet added 2 commits 2026-08-29 09:58:26 +02:00

podman-build-publish: gate pushes on a Trivy vulnerability scan ... 5f499cd0ac

New scan step between build and push: the built image is exported and
scanned with Trivy; fixable HIGH/CRITICAL findings fail the action and
block the push. Configurable via new scan / scan-severity inputs.
Implements noctrl.podman security review finding #16 (CI level).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

Use docker-archive for the Trivy scan export (oci-archive unsupported) ... ec5a498266

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

peet merged commit 2e0291a757 into main 2026-08-29 09:58:37 +02:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

peet

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: public/actions#1