ci: add Trivy security scan to PR pipeline - #75

Draft

yaroslavmokflmg wants to merge 8 commits into

Commits on Aug 3, 2026

ci: add Trivy security scan to PR pipeline
yaroslavmokflmg
committed
16444f6
ci: harden trivy gate — no persisted git credentials, visible warnings for skipped scans
yaroslavmokflmg
committed
91528f8

Commits on Aug 5, 2026

ci: make trivy gate non-blocking (allow fail) until devs have capacity
yaroslavmokflmg
committed
76ab2a8
ci: trivy code+docker scan in one job, in-build image scan, per-scan TSV artifacts
yaroslavmokflmg
committed
87f49d3
ci: merge all trivy reports into one artifact per run, skip empty reports
yaroslavmokflmg
committed
329a8dd
ci: merge all trivy reports into one artifact per run, dedupe upload step
yaroslavmokflmg
committed
42ac396
ci: compact trivy action — piped scans, unified evaluate, single merged report
yaroslavmokflmg
committed
719a789
ci: report unique vulnerability count in trivy error message
yaroslavmokflmg
committed
e791e7e