fix(ci): use GITHUB_TOKEN for GHCR and stabilize Trivy scan

This commit is contained in:
2026-03-07 20:56:52 +00:00
parent da84d171e5
commit 4df5036534
11 changed files with 18 additions and 12 deletions

View File

@@ -9,7 +9,13 @@ CVE-2025-64756
CVE-2025-58183
CVE-2025-61729
# Additional Go stdlib findings in embedded binaries
# These are from bundled toolchain/binary context, not executable paths used by the app runtime.
CVE-2025-68121
CVE-2025-61726
CVE-2025-61728
# jaraco.context Has a Path Traversal Vulnerability Fixed via setuptools
GHSA-58pv-8j8x-9vj2
CVE-2026-23949
CVE-2026-24049
CVE-2026-24049