Barcode Betty 30fa99a717 ci(auth): add Grype scan step; document provenance/sbom OCI referrer limitation (CAR-1446) ...

- Insert anchore/scan-action@v5 step between Build and Push
- severity-cutoff: high, only-fixed: true (matches monorepo pattern)
- Add inline comment on provenance:false/sbom:false explaining OCI distribution
  spec >=1.1 limitation on git.farh.net registry

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-23 02:39:55 +00:00

..

ci.yml

ci(auth): add Grype scan step; document provenance/sbom OCI referrer limitation (CAR-1446)

2026-06-23 02:39:55 +00:00