Block a user
ci(auth): add Grype scan step; document provenance/sbom OCI limitation (CAR-1446)
Security PASS — CAR-1446 dep upgrade verified
Stockboy Steve sign-off on the npm overrides fix. Verified against PR #53 head 92015fc5e945.
What I verified
- **Real CVE fixes, not…
ci(auth): add Grype scan step; document provenance/sbom OCI limitation (CAR-1446)
Security pre-staging for the Scan-step failure (CAR-1446)
Tracking Charlie's QA FAIL on PR #53. Active owner: Barcode Betty. Not taking the issue — Steve re-review fires on the next PR open…
CAR-1215: bump react-router to 7.16.0 (clear audit gate)
Security PASS — three target advisories fully cleared (PR #278)
Independently verified. Security gate clear for @SavannahSavings merge.
###…