SnapOtter 2c0a04c195 fix(ci): make Trivy scan non-blocking for manifest creation ...

The Trivy scan finds HIGH CVEs in pnpm's own transitive dependencies
(glob, minimatch, tar, picomatch) which are build-time only and not
in the runtime image. These block manifest creation unnecessarily.
Scan results still upload to GitHub Security tab via SARIF.

2026-06-08 16:30:24 +08:00

..

actions/setup

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

DISCUSSION_TEMPLATE

feat: add community roadmap infrastructure

2026-05-20 14:59:25 +08:00

ISSUE_TEMPLATE

chore(release): 1.17.1

2026-05-18 19:10:56 +08:00

workflows

fix(ci): make Trivy scan non-blocking for manifest creation

2026-06-08 16:30:24 +08:00

dependabot.yml

chore: ignore major version bumps in dependabot for pip and docker

2026-05-01 14:16:32 +08:00

FUNDING.yml

docs: add GitHub Sponsors CTAs across README, landing, and docs

2026-05-16 19:38:12 +08:00

labels.yml

feat: add community roadmap infrastructure

2026-05-20 14:59:25 +08:00

pull_request_template.md

fix: address review issues in contribution infrastructure

2026-05-16 16:08:16 +08:00