This repository was archived by the owner on Jul 17, 2026. It is now read-only.
Repository navigation
Latest Release v6.2.138
Changes
Enable Trivy container CVE scan (ENG-314)
Linked Tickets
High Level Description
Enables the Trivy container CVE scan by setting scan_container: true on the shared build-docker call (test and release). The built linux/amd64 image is scanned with a digest-pinned Trivy; the build fails on CRITICAL findings and uploads a JSON report artifact (no GHAS upload). Scan runs in an isolated least-privilege job.
What's Changed
- Enable Trivy container CVE scan (ENG-314) by @dblane-digicatapult in #820
Full Changelog: v6.2.137...latest
Contributors
dblane-digicatapult