ci: add Trivy security scan to PR pipeline - #1634

Draft

yaroslavmokflmg wants to merge 19 commits into

mainfrom

Commits on Aug 3, 2026

ci: add Trivy security scan to PR pipeline
yaroslavmokflmg
committed
a68f695
ci: harden trivy gate — no persisted git credentials, visible warnings for skipped scans
yaroslavmokflmg
committed
c02de14

Commits on Aug 5, 2026

ci: make trivy gate non-blocking (allow fail) until devs have capacity
yaroslavmokflmg
committed
1a8b5cc
ci: add Trivy security scan to PR pipeline
yaroslavmokflmg
committed
3b5cf43
ci: harden trivy gate — no persisted git credentials, visible warnings for skipped scans
yaroslavmokflmg
committed
761f158
ci: make trivy gate non-blocking (allow fail) until devs have capacity
yaroslavmokflmg
committed
7071174
ci: trivy code+docker scan in one job, in-build image scan, per-scan TSV artifacts
yaroslavmokflmg
committed
f2b4238
Merge branch 'security/trivy' of https://github.com/flamingo-stack/openframe-oss-lib into security/trivy
yaroslavmokflmg
committed
a7bcb07
ci: merge all trivy reports into one artifact per run, skip empty reports
yaroslavmokflmg
committed
89ce205
ci: merge all trivy reports into one artifact per run, dedupe upload step
yaroslavmokflmg
committed
4333c55
ci: compact trivy action — piped scans, unified evaluate, single merged report
yaroslavmokflmg
committed
1fbc99f
ci: report unique vulnerability count in trivy error message
yaroslavmokflmg
committed
adf92ad

Commits on Aug 18, 2026

Commits on Aug 21, 2026