trivy-scan: optional skip-dirs input for vendored toolchains #4

Merged

peet merged 1 commits from trivy-scan-skip-dirs into main

2026-08-30 10:26:35 +02:00

Author	SHA1	Message	Date
peetandClaude Fable 5	0df98cd6c8	trivy-scan: optional skip-dirs input for vendored toolchains For directories whose bundled dependencies cannot be upgraded in place — first user: the Android SDK cmdline-tools jars (old protobuf/guava et al. inside sdkmanager) in the gitea-runner-android image. Callers must leave a comment in the workflow explaining each exclusion. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg	2026-08-30 10:23:35 +02:00

Author

SHA1

Message

Date

peetandClaude Fable 5

0df98cd6c8

trivy-scan: optional skip-dirs input for vendored toolchains

For directories whose bundled dependencies cannot be upgraded in place —
first user: the Android SDK cmdline-tools jars (old protobuf/guava et al.
inside sdkmanager) in the gitea-runner-android image. Callers must leave a
comment in the workflow explaining each exclusion.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

2026-08-30 10:23:35 +02:00