Trivy scan gate #1

Merged

peet merged 2 commits from trivy-scan-gate into main

2026-08-29 09:58:37 +02:00

Author	SHA1	Message	Date
peetandClaude Fable 5	ec5a498266	Use docker-archive for the Trivy scan export (oci-archive unsupported) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg	2026-08-29 09:39:49 +02:00
peetandClaude Fable 5	5f499cd0ac	podman-build-publish: gate pushes on a Trivy vulnerability scan New scan step between build and push: the built image is exported and scanned with Trivy; fixable HIGH/CRITICAL findings fail the action and block the push. Configurable via new scan / scan-severity inputs. Implements noctrl.podman security review finding #16 (CI level). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg	2026-08-29 09:38:38 +02:00

Author

SHA1

Message

Date

peetandClaude Fable 5

ec5a498266

Use docker-archive for the Trivy scan export (oci-archive unsupported)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

2026-08-29 09:39:49 +02:00

peetandClaude Fable 5

5f499cd0ac

podman-build-publish: gate pushes on a Trivy vulnerability scan

New scan step between build and push: the built image is exported and
scanned with Trivy; fixable HIGH/CRITICAL findings fail the action and
block the push. Configurable via new scan / scan-severity inputs.
Implements noctrl.podman security review finding #16 (CI level).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

2026-08-29 09:38:38 +02:00