Bo-Yi WuandClaude Fable 5 78e5f2ccac ci(trivy): add scheduled security scan workflow ...

- Scan the repository filesystem for CRITICAL and HIGH vulnerabilities and upload SARIF results to the GitHub Security tab
- Build the Docker image and scan it, gating the build on CRITICAL findings only
- Run quarterly on a schedule, on manual dispatch, and on pushes and pull requests to the default branch

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-09 12:50:42 +08:00

..

ci.yml

chore(ci): update GitHub Actions dependencies to latest versions

2026-06-23 20:07:08 +08:00

goreleaser.yml

chore(ci): bump actions/setup-go from v6 to v7

2026-07-18 09:58:01 +08:00

trivy.yml

ci(trivy): add scheduled security scan workflow

2026-08-09 12:50:42 +08:00