geointel

5 Commits

Include renames

Author	SHA1	Message	Date
Jens	55c500ca7b	ci: fix Gitea artifact and npm audit handling GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s Details GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s Details GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s Details GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s Details	2026-08-26 23:56:58 +02:00
Jens	9d8913c134	ci: use nested-runner-safe secret scan GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s Details GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s Details GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s Details GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s Details	2026-08-26 23:56:33 +02:00
Jens	1fe77f4de4	ci: pin actions and scan both GIS and AI images GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 22s Details GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s Details GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s Details GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s Details	2026-08-26 22:22:41 +02:00
Jens	f085891630	fix(security): add secret-scan step to CI (both .gitea and .github variants) Had a real dependency/container-image Trivy scan but no secret scan. Adds trufflehog (Marketplace Action) as the first step after checkout in both the .gitea/workflows/ and .github/workflows/ copies of this workflow (kept in sync as platform-specific variable-syntax variants of the same pipeline) - the last gap for this repo to count as fully-authored.	2026-08-16 14:55:37 +02:00
Codex	027e4b078b	Complete RC6 supply chain gates GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s Details GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s Details GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s Details	2026-07-18 04:15:59 +02:00