api/.grype.yaml at 4877513bbf3dccb35e42ec5c3d62fbf4c0ee2f55 - api - Gitea

cartsnitch/api

Files

T

Barcode Betty 3101b43079 feat: CI workflow updates, Grype scan, and doc fixes

- Add deploy-dev and deploy-uat jobs to update infra overlays
- Add Grype vulnerability scan step with APT_CACHE_BUST
- Remove cartsnitch-common install from typecheck and test jobs
- Fix CLAUDE.md: API has its own local models, no cartsnitch-common dep
- Add .grype.yaml from monorepo root

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-19 11:50:39 +00:00

4 lines

156 B

YAML

Raw Blame History

 ignore:
   # Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
   - vulnerability: CVE-2025-13836
   - vulnerability: CVE-2026-4519