Marc-André Bombeck 09d932ce2a ci: fail the container scan only on findings with a fix ...

The Debian base carries HIGH advisories the distribution has not fixed
(util-linux, ncurses, systemd, acl, sqlite, perl-base), which no change
here can remove. The blocking image scan now runs with --ignore-unfixed,
so a finding with a published fix still fails the job, and a separate
step before it lists every HIGH and CRITICAL finding without failing.
The scheduled scan's critical gate follows the same rule; its SARIF
report keeps everything.

2026-11-04 13:14:04 +01:00

..

ISSUE_TEMPLATE

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

workflows

ci: fail the container scan only on findings with a fix

2026-11-04 13:14:04 +01:00

dependabot.yml

build: run the image on the official Node 22 Debian slim image

2026-11-04 13:13:56 +01:00

FUNDING.yml

docs: README presentation polish + community-file gaps

2026-06-05 03:01:36 +02:00

PULL_REQUEST_TEMPLATE.md

docs: PR template targets main — the develop branch was retired

2026-07-14 10:36:25 +02:00