public/actions
Public Access
1
0 Fork 0
Code Pull Requests Actions Activity

trivy-fs-scan: enforce by default; 'false' is the emergency escape #5

Merged
peet merged 1 commits from fs-scan-enforce-default into main 2026-08-30 19:36:33 +02:00
Conversation 0 Commits 1 Files Changed 2
+9 -6
peet commented 2026-08-30 19:36:29 +02:00
Owner
Copy link
Copy source

Feedback from the first rollout: a default-off gate is the wrong way
around — the default must be active and enforced, with the opt-out as an
explicit, documented per-invocation emergency flag (same posture as the
image-scan gate).

Co-Authored-By: Claude Fable 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg

Feedback from the first rollout: a default-off gate is the wrong way around — the default must be active and enforced, with the opt-out as an explicit, documented per-invocation emergency flag (same posture as the image-scan gate). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg
peet added 1 commit 2026-08-30 19:36:29 +02:00
trivy-fs-scan: enforce by default; 'false' is the emergency escape 53db2936de 
Feedback from the first rollout: a default-off gate is the wrong way
around — the default must be active and enforced, with the opt-out as an
explicit, documented per-invocation emergency flag (same posture as the
image-scan gate).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P5NjXQ3jmyVjimHQxnyKhg
peet merged commit cc11e264c6 into main 2026-08-30 19:36:33 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
peet
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: public/actions#5