SnapOtter c9b24ada78 ci: add Trivy container vulnerability scan to release pipeline ...

Scans the amd64 Docker image for CRITICAL/HIGH CVEs with available fixes
before publishing multi-arch manifests. Results upload to GitHub Security tab
as SARIF. Blocks release if fixable vulnerabilities are found.

2026-05-06 22:39:49 +08:00

..

actions/setup

chore: add VS Code workspace config and improve CI infrastructure

2026-05-01 00:28:10 +08:00

ISSUE_TEMPLATE

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

workflows

ci: add Trivy container vulnerability scan to release pipeline

2026-05-06 22:39:49 +08:00

dependabot.yml

chore: ignore major version bumps in dependabot for pip and docker

2026-05-01 14:16:32 +08:00

FUNDING.yml

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

pull_request_template.md

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00