ci: add Trivy security scan to PR pipeline - #63

Draft

yaroslavmokflmg wants to merge 8 commits into

Commits on Aug 3, 2026

ci: add Trivy security scan to PR pipeline
yaroslavmokflmg
committed
bb5d9b7
ci: harden trivy gate — no persisted git credentials, visible warnings for skipped scans
yaroslavmokflmg
committed
80a46bd

Commits on Aug 5, 2026

ci: make trivy gate non-blocking (allow fail) until devs have capacity
yaroslavmokflmg
committed
077837c
ci: trivy code+docker scan in one job, in-build image scan, per-scan TSV artifacts
yaroslavmokflmg
committed
9dd46bf
ci: merge all trivy reports into one artifact per run, skip empty reports
yaroslavmokflmg
committed
7ddfa2d
ci: merge all trivy reports into one artifact per run, dedupe upload step
yaroslavmokflmg
committed
7563a74
ci: compact trivy action — piped scans, unified evaluate, single merged report
yaroslavmokflmg
committed
cfe4a20
ci: report unique vulnerability count in trivy error message
yaroslavmokflmg
committed
95017b0