T

CD / Release (push) Successful in 4s

Details

refactor(setup-db): to run trivy in docker (#54 )

As part of our safety initiative, I'm refactoring setup-db to run trivy inside a Docker container with minimal privileges, reducing leakage of secrets, files, etc. to a minimum in case the dependency gets compromised.
Additionally, we are always pinning the trivy docker image to a fixed digest. Renovate has been configured to keep the Trivy image version up-to-date.

Reviewed-on: #54
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>

2026-04-10 18:43:03 +02:00

.gitea/workflows

chore(deps): update https://gitea.t000-n.de/t.behrendt/actions action to v0.2.1 (#49 )

2026-03-15 21:52:37 +01:00

get-images-from-files

fix: Dockerfile handling with alias (#46 )

2026-02-26 21:52:38 +01:00

merge-sarif-files

fix(merge-sarif-files): file list too long (#40 )

2026-02-15 16:59:38 +01:00

setup-db

refactor(setup-db): to run trivy in docker (#54 )