5 Commits

Author	SHA1	Message	Date
Bo-Yi Wu	1b3682366c	ci(actions): bump checkout from v6 to v7	2026-06-23 10:51:23 +08:00
Bo-Yi Wu	24ef1dc20c	ci(actions): bump trivy-action to v0.36.0 and codecov-action to v6	2026-04-25 16:51:03 +08:00
Bo-Yi Wu	c773b54f0e	ci: standardize Trivy security scanning workflows ... - Add Trivy image scan job to trivy.yml alongside existing repo scan - Add Trivy image scan step in docker.yml before pushing Docker image - Add security-events permission for SARIF upload	2026-04-16 18:10:08 +08:00
Bo-Yi Wu	5d50e1e745	ci(actions): upgrade GitHub Actions to latest versions ... - bump actions/checkout to v6 - bump actions/setup-go to v6 - bump actions/cache to v5 - bump goreleaser/goreleaser-action to v7 - bump golangci/golangci-lint-action to v9 - bump github/codeql-action/* to v4 - bump codecov/codecov-action to v5 - bump docker/build-push-action to v7 - bump docker/login-action to v4 - bump docker/metadata-action to v6 - bump docker/setup-buildx-action to v4 - bump docker/setup-qemu-action to v4 - bump hadolint/hadolint-action to v3.3.0 - bump aquasecurity/trivy-action to v0.35.0	2026-04-16 12:06:52 +08:00
Bo-Yi Wu	77ea4873e0	ci: modernize CI workflows and enhance security scanning ... - Update GitHub Actions to use newer versions for setup-go, checkout, golangci-lint, and codecov - Change Go version specification to use "stable" and update test matrix to only "1.25" - Rename the test job to testing - Adjust hadolint to use a newer version and reference the Dockerfile at the root - Modify go test command to enable race detection and test all packages - Add a new Trivy security scan workflow for vulnerability, secret, and misconfiguration checks, including SARIF upload and log output Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>	2025-12-01 16:21:24 +08:00