SnapOtter c9b24ada78 ci: add Trivy container vulnerability scan to release pipeline ...

Scans the amd64 Docker image for CRITICAL/HIGH CVEs with available fixes
before publishing multi-arch manifests. Results upload to GitHub Security tab
as SARIF. Blocks release if fixable vulnerabilities are found.

2026-05-06 22:39:49 +08:00

..

ci.yml

fix(ci): ignore 3 new Pillow CVEs blocked by ML dependency constraints

2026-05-06 10:40:30 +08:00

dependency-review.yml

chore: add VS Code workspace config and improve CI infrastructure

2026-05-01 00:28:10 +08:00

deploy-docs.yml

chore: add VS Code workspace config and improve CI infrastructure

2026-05-01 00:28:10 +08:00

deploy-landing.yml

chore: add VS Code workspace config and improve CI infrastructure

2026-05-01 00:28:10 +08:00

release.yml

ci: add Trivy container vulnerability scan to release pipeline

2026-05-06 22:39:49 +08:00