Commits on Jun 30, 2023

1. tools/CI: scan repository with trivy security scanner (yarn.lock, com… …

   …poser.lock)
   
   - run scan on each push/pull request update
   - can be run locally using make test_trivy_repo
   - exit with error code 0/success when vulnerabilities are found,  as not to make the workflow fail, a separate periodic run that exits with code 1 should be added in parallel
   - update trivy to v0.43.0
   - https://github.com/aquasecurity/trivy/releases/tag/v0.43.0
   - also consider TRIVY_EXIT_CODE when running trivy on the latest docker image
   - ref. shaarli#1531

   

   nodiscc committed Jun 30, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 3b5923b
   • Browse repository at this point

   Copy the full SHA

   3b5923b View commit details

   Browse the repository at this point in the history