 dependabot[bot]
|
4d9a1d2a54
|
chore(deps): bump github/codeql-action/upload-sarif (#4552)
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.7 to 4.38.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...24c54180a607b1449ed407dd24f251e4e9147c8d)
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-10-14 18:41:04 +00:00 |
|
|
Matthew GrossmanandEvan Lezar
|
6048bed368
|
fix(ci): retry Nix shell and app dependency preparation (#4066)
* fix(ci): prepare Nix development shells in setup-nix
Signed-off-by: Evan Lezar <elezar@nvidia.com>
* fix(ci): retry Nix builds before executing apps once
Signed-off-by: Evan Lezar <elezar@nvidia.com>
---------
Signed-off-by: Evan Lezar <elezar@nvidia.com>
Co-authored-by: Evan Lezar <elezar@nvidia.com>
|
2026-10-02 11:27:20 +00:00 |
|
|
alangou
|
3eb81beba9
|
ci(security): orchestrate security scans with severity gating (#3255)
Signed-off-by: Adrien Langou <alangou@nvidia.com>
|
2026-09-11 10:26:56 +00:00 |
|
|
alangou
|
3693b32841
|
ci(trivy): add artifact and PR configuration scans (#3185)
* ci(trivy): add artifact and PR configuration scans
Signed-off-by: Adrien Langou <alangou@nvidia.com>
* fix(ci): harden Trivy gate detection and finding diff
Signed-off-by: Adrien Langou <alangou@nvidia.com>
* feat(ci): scan released artifacts in release pipelines
Signed-off-by: Adrien Langou <alangou@nvidia.com>
* fix(ci): harden and simplify Trivy scans
Signed-off-by: Adrien Langou <alangou@nvidia.com>
* fix(ci): consolidate Trivy reports and prevent collisions
Signed-off-by: Adrien Langou <alangou@nvidia.com>
---------
Signed-off-by: Adrien Langou <alangou@nvidia.com>
|
2026-09-09 13:58:06 +00:00 |
|