Latte 4e108771f8 ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

..

ci.yml

ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

publish.yml

ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16)

2026-10-14 17:40:16 +02:00

scan.yml

ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16)

2026-10-14 17:40:16 +02:00