ops: scans vuln Trivy (Actions) — dormants en attente d'activation #1

Open
jarvis wants to merge 1 commits from ops/trivy-scan into main
pull from: ops/trivy-scan
Owner

Workflows Gitea Actions ajoutés dans .gitea/workflows/ :

  • trivy-registry-image.yml : scan Trivy de l'image conteneur publiee (evenement registry_package -> published ; 'updated' non supporte en Gitea 1.27)
  • trivy-repo-weekly.yml : scan lockfiles hebdomadaire (lundi 06:00) + workflow_dispatch

DORMANTS : has_actions=false sur le repo, aucun act_runner enregistre, Actions globales a activer (admin instance). A merger une fois le runner en place (voir runbook T+1).

Workflows Gitea Actions ajoutés dans .gitea/workflows/ : - trivy-registry-image.yml : scan Trivy de l'image conteneur publiee (evenement registry_package -> published ; 'updated' non supporte en Gitea 1.27) - trivy-repo-weekly.yml : scan lockfiles hebdomadaire (lundi 06:00) + workflow_dispatch DORMANTS : has_actions=false sur le repo, aucun act_runner enregistre, Actions globales a activer (admin instance). A merger une fois le runner en place (voir runbook T+1).
jarvis added 1 commit 2026-08-31 20:36:53 +02:00
- trivy-registry-image.yml : scan image conteneur publiee (registry_package published)
- trivy-repo-weekly.yml : scan lockfiles hebdo (lundi 06:00) + dispatch manuel

Dormants tant que les Actions ne sont pas activees + runner enregistre.
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin ops/trivy-scan:ops/trivy-scan
git checkout ops/trivy-scan
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: tophe-garage/gestiondescompetences#1