Repository navigation

CI: real-tool smoke for trivy, with a digest-pinned vuln DB - #2372

Merged

remigiusz-antczak merged 13 commits into

mainfrom

feat/hub-real-smoke-9

Nov 14, 2026

Merged

CI: real-tool smoke for trivy, with a digest-pinned vuln DB#2372
remigiusz-antczak merged 13 commits into
mainfrom
feat/hub-real-smoke-9

Commits on Nov 13, 2026
- CI: real-tool smoke for semgrep and njsscan, exact trufflehog detector
  
  remigiusz-antczak
  and
  claude
  committed
  e144729
- CI: test semgrep 1.182.1 in real-hub, fix checkov pin assertion
  
  remigiusz-antczak
  and
  claude
  committed
  89bf645
- CI: real-tool smoke for tflint, kics, cppcheck and devskim
  
  remigiusz-antczak
  and
  claude
  committed
  031542b
- CI: pin the cppcheck .deb by sha256, verify the devskim signature, fix comments
  
  remigiusz-antczak
  and
  claude
  committed
  8aee6f5
- CI: real-tool smoke for govulncheck and grype
  
  remigiusz-antczak
  and
  claude
  committed
  a0871cb
- CI: retry, longer timeout and wider grype rule for the govulncheck and grype smoke
  
  remigiusz-antczak
  and
  claude
  committed
  b496af3
- Merge origin/main into feat/hub-real-smoke-7
  
  remigiusz-antczak
  and
  claude
  committed
  48c463f
- CI: real-tool smoke for trivy, with a digest-pinned vuln DB
  
  remigiusz-antczak
  and
  claude
  committed
  c054cf4
- CI: verify the trivy checksums signature and assert the pinned DB digest
  
  remigiusz-antczak
  and
  claude
  committed
  c20ef39
- Hub: fix kubescape report path; add real kubescape to CI smoke
  
  remigiusz-antczak
  and
  claude
  committed
  98d24b4
- Merge remote-tracking branch 'origin/main' into feat/hub-real-smoke-8b
  remigiusz-antczak
  committed
  4ae7fc7
- Merge remote-tracking branch 'origin/feat/hub-real-smoke-8b' into HEAD
  remigiusz-antczak
  committed
  de1aadd
Commits on Nov 14, 2026
- Merge remote-tracking branch 'origin/main' into HEAD
  remigiusz-antczak
  committed
  11e2769

Commits

Commits on Nov 13, 2026

Commits on Nov 14, 2026