Jens/MobilityOps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use Gitea-compatible canary evidence upload #3

Merged
Jens merged 8 commits from codex/resolve-projectbrain-findings-20260828 into master 2026-09-01 20:09:22 +00:00
Conversation 0 Commits 8 Files Changed 7
+5 -5
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit d20ff7a243 - Show all commits
.gitea/workflows/ci.yml
+2 -2
View File
@@ -33,7 +33,7 @@ jobs:
docker build --target runtime --build-arg VCS_REF="$GITHUB_SHA" \ docker build --target runtime --build-arg VCS_REF="$GITHUB_SHA" \
--tag mobilityops-api-ci --file backend/Dockerfile . --tag mobilityops-api-ci --file backend/Dockerfile .
- name: Production API image vulnerability scan (HIGH/CRITICAL) - name: Production API image vulnerability scan (HIGH/CRITICAL)
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0 uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with: with:
scan-type: image scan-type: image
image-ref: mobilityops-api-ci image-ref: mobilityops-api-ci
@@ -46,7 +46,7 @@ jobs:
docker build --build-arg VCS_REF="$GITHUB_SHA" \ docker build --build-arg VCS_REF="$GITHUB_SHA" \
--tag mobilityops-web-ci frontend --tag mobilityops-web-ci frontend
- name: Production web image vulnerability scan (HIGH/CRITICAL) - name: Production web image vulnerability scan (HIGH/CRITICAL)
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0 uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with: with:
scan-type: image scan-type: image
image-ref: mobilityops-web-ci image-ref: mobilityops-web-ci
.gitea/workflows/release.yml
+3 -3
View File
@@ -24,21 +24,21 @@ jobs:
--ignore-unfixed --exit-code 1 "$image" --ignore-unfixed --exit-code 1 "$image"
done done
- name: Generate API CycloneDX SBOM - name: Generate API CycloneDX SBOM
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0 uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with: with:
scan-type: image scan-type: image
image-ref: mobilityops-api-release image-ref: mobilityops-api-release
format: cyclonedx format: cyclonedx
output: mobilityops-api-sbom.cdx.json output: mobilityops-api-sbom.cdx.json
- name: Generate web CycloneDX SBOM - name: Generate web CycloneDX SBOM
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0 uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with: with:
scan-type: image scan-type: image
image-ref: mobilityops-web-release image-ref: mobilityops-web-release
format: cyclonedx format: cyclonedx
output: mobilityops-web-sbom.cdx.json output: mobilityops-web-sbom.cdx.json
- name: Generate backup-tools CycloneDX SBOM - name: Generate backup-tools CycloneDX SBOM
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0 uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with: with:
scan-type: image scan-type: image
image-ref: mobilityops-backup-tools-release image-ref: mobilityops-backup-tools-release