appleboy 7a94dda076 ci: integrate automated Trivy security scanning in CI workflows ...

- Add explicit permissions for contents, packages, and security-events to the Docker GitHub Actions workflow
- Integrate Trivy vulnerability scanning and results upload into the Docker workflow
- Add a dedicated GitHub Actions workflow for Trivy security scanning of both repository files and Docker images, with scheduled, push, and pull request triggers
- Ensure Trivy SARIF results are uploaded to the GitHub Security tab after scans

Signed-off-by: appleboy <appleboy.tw@gmail.com>

2025-11-28 21:43:07 +08:00

..

workflows

ci: integrate automated Trivy security scanning in CI workflows

2025-11-28 21:43:07 +08:00

dependabot.yml

chore: add dependabot

2022-06-15 22:19:33 +08:00

FUNDING.yml

chore: enable funding button

2022-06-15 22:26:03 +08:00