Add CI workflow and Grype CVE ignores
- Add .github/workflows/ci.yml with build/push and deploy-dev/uat jobs - Add .grype.yaml with Python 3.12 CVE ignores Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
@@ -169,4 +169,4 @@ jobs:
|
|||||||
git diff --cached --quiet && echo "No changes" && exit 0
|
git diff --cached --quiet && echo "No changes" && exit 0
|
||||||
git commit -m "ci(uat): update auth image from cartsnitch/auth CI"
|
git commit -m "ci(uat): update auth image from cartsnitch/auth CI"
|
||||||
git pull --rebase origin main
|
git pull --rebase origin main
|
||||||
git push origin main
|
git push origin main
|
||||||
|
|||||||
@@ -0,0 +1,4 @@
|
|||||||
|
ignore:
|
||||||
|
# Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
|
||||||
|
- vulnerability: CVE-2025-13836
|
||||||
|
- vulnerability: CVE-2026-4519
|
||||||
Reference in New Issue
Block a user