ci: add Trivy security scan to PR pipeline - #92

Draft

yaroslavmokflmg wants to merge 8 commits into

mainfrom

Commits on Aug 3, 2026

ci: add Trivy security scan to PR pipeline
yaroslavmokflmg
committed
38eeab5
ci: harden trivy gate — no persisted git credentials, visible warnings for skipped scans
yaroslavmokflmg
committed
e47e7b4

Commits on Aug 5, 2026

ci: make trivy gate non-blocking (allow fail) until devs have capacity
yaroslavmokflmg
committed
9c899aa
ci: trivy code+docker scan in one job, in-build image scan, per-scan TSV artifacts
yaroslavmokflmg
committed
a333029
ci: merge all trivy reports into one artifact per run, skip empty reports
yaroslavmokflmg
committed
7ea71c1
ci: merge all trivy reports into one artifact per run, dedupe upload step
yaroslavmokflmg
committed
d3e6f47
ci: compact trivy action — piped scans, unified evaluate, single merged report
yaroslavmokflmg
committed
07a1758
ci: report unique vulnerability count in trivy error message
yaroslavmokflmg
committed
21c7f77