fix(ci): use GITHUB_TOKEN for GHCR and stabilize Trivy scan
This commit is contained in:
@@ -9,7 +9,13 @@ CVE-2025-64756
|
||||
CVE-2025-58183
|
||||
CVE-2025-61729
|
||||
|
||||
# Additional Go stdlib findings in embedded binaries
|
||||
# These are from bundled toolchain/binary context, not executable paths used by the app runtime.
|
||||
CVE-2025-68121
|
||||
CVE-2025-61726
|
||||
CVE-2025-61728
|
||||
|
||||
# jaraco.context Has a Path Traversal Vulnerability Fixed via setuptools
|
||||
GHSA-58pv-8j8x-9vj2
|
||||
CVE-2026-23949
|
||||
CVE-2026-24049
|
||||
CVE-2026-24049
|
||||
|
||||
Reference in New Issue
Block a user