Latte 4e108771f8 ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

..

cleanup_job_resources.sh

ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

install_gitleaks.sh

ci: single Gitea Actions pipeline, uv-based image, scoped docker cleanup

2026-10-14 15:59:19 +02:00

install_trivy.sh

ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16)

2026-10-14 17:40:16 +02:00

pip_audit.sh

ci: single Gitea Actions pipeline, uv-based image, scoped docker cleanup

2026-10-14 15:59:19 +02:00

scan_image.sh

ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16)

2026-10-14 17:40:16 +02:00