ci: add Trivy security scanning (SAST/SCA) to pipeline
- PR checks: filesystem scan with Trivy (vuln, secret, misconfig) - Deploy pipeline: image scan for bot and web containers before deploy - Scans entire repository, not filtered file subsets - Bump version -> 1.14.0 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
+2
-2
@@ -17,7 +17,7 @@ services:
|
||||
retries: 10
|
||||
|
||||
bot:
|
||||
image: git.codeanddice.ru/toutsu/gmrelay-bot:1.13.0
|
||||
image: git.codeanddice.ru/toutsu/gmrelay-bot:1.14.0
|
||||
restart: always
|
||||
depends_on:
|
||||
db:
|
||||
@@ -30,7 +30,7 @@ services:
|
||||
- gmrelay
|
||||
|
||||
web:
|
||||
image: git.codeanddice.ru/toutsu/gmrelay-web:1.13.0
|
||||
image: git.codeanddice.ru/toutsu/gmrelay-web:1.14.0
|
||||
restart: always
|
||||
depends_on:
|
||||
db:
|
||||
|
||||
Reference in New Issue
Block a user