Implement Basic Trivy Scanning Workflow#256

Merged

josecelano merged 15 commits intomainfrom

251-implement-basic-trivy-scanning-workflow

Dec 29, 2025

Commits on Dec 23, 2025

feat: [#251] implement basic trivy scanning workflow
josecelano
committed
fix: [#251] update docker build context and action versions
josecelano
committed
feat: [#251] add human-readable vulnerability output to workflow logs
josecelano
committed
fix: [#251] disable secret scanning for test containers with SSH keys
josecelano
committed
fix: [#251] focus CVE scanning only, display all issues for visibility
josecelano
committed
chore: [#251] update trivy-action from v0.28.0 to v0.33.1
josecelano
committed
refactor: [#251] separate SARIF upload to dedicated job with minimal permissions
josecelano
committed
fix: [#251] sanitize Docker image names for artifact naming
josecelano
committed
fix: [#251] prevent workflow failure and artifact name conflicts
josecelano
committed
fix: [#251] upload SARIF files with unique categories per image
josecelano
committed
fix: [#251] upload SARIF files with unique categories per image
josecelano
committed
refactor: [#251] apply security-first workflow philosophy with exit-code 0
josecelano
committed
docs: [#251] add ADR for docker security scan exit code zero philosophy
josecelano
committed
fix: [#251] use CodeQL action for SARIF upload with category support
josecelano
committed
docs: [#251] document Security tab viewing behavior
josecelano
committed