Repository navigation

CI: real-tool smoke for mobsfscan and eslint-security - #2375

Merged

remigiusz-antczak merged 30 commits into

mainfrom

feat/hub-real-smoke-12

Nov 15, 2026

Merged

CI: real-tool smoke for mobsfscan and eslint-security#2375
remigiusz-antczak merged 30 commits into
mainfrom
feat/hub-real-smoke-12

Commits on Nov 13, 2026
- CI: real-tool smoke for semgrep and njsscan, exact trufflehog detector
  
  remigiusz-antczak
  and
  claude
  committed
  e144729
- CI: test semgrep 1.182.1 in real-hub, fix checkov pin assertion
  
  remigiusz-antczak
  and
  claude
  committed
  89bf645
- CI: real-tool smoke for tflint, kics, cppcheck and devskim
  
  remigiusz-antczak
  and
  claude
  committed
  031542b
- CI: pin the cppcheck .deb by sha256, verify the devskim signature, fix comments
  
  remigiusz-antczak
  and
  claude
  committed
  8aee6f5
- CI: real-tool smoke for govulncheck and grype
  
  remigiusz-antczak
  and
  claude
  committed
  a0871cb
- CI: retry, longer timeout and wider grype rule for the govulncheck and grype smoke
  
  remigiusz-antczak
  and
  claude
  committed
  b496af3
- Merge origin/main into feat/hub-real-smoke-7
  
  remigiusz-antczak
  and
  claude
  committed
  48c463f
- CI: real-tool smoke for trivy, with a digest-pinned vuln DB
  
  remigiusz-antczak
  and
  claude
  committed
  c054cf4
- CI: verify the trivy checksums signature and assert the pinned DB digest
  
  remigiusz-antczak
  and
  claude
  committed
  c20ef39
- CI: real-tool smoke for osv-scanner, shellcheck and guarddog
  
  remigiusz-antczak
  and
  claude
  committed
  d4736f4
- CI: harden the osv DB seed, guarddog install and canary retries
  
  authored and
  Remigiusz Antczak
  committed
  6271c4a
- CI: real-tool smoke for cargo-audit, cargo-deny and brakeman
  
  remigiusz-antczak
  and
  claude
  committed
  64d11a0
- CI: real-tool smoke for mobsfscan and eslint-security
  
  remigiusz-antczak
  and
  claude
  committed
  f64da19
- CI: put the mobsfscan wrapper dir on GITHUB_PATH in its own step
  
  remigiusz-antczak
  and
  claude
  committed
  f4ad4ca
- Hub: fix kubescape report path; add real kubescape to CI smoke
  
  remigiusz-antczak
  and
  claude
  committed
  98d24b4
- Merge remote-tracking branch 'origin/main' into feat/hub-real-smoke-8b
  remigiusz-antczak
  committed
  4ae7fc7
- Merge remote-tracking branch 'origin/feat/hub-real-smoke-8b' into HEAD
  remigiusz-antczak
  committed
  de1aadd
Commits on Nov 14, 2026
- Merge remote-tracking branch 'origin/main' into HEAD
  remigiusz-antczak
  committed
  11e2769
- Merge commit '11e276905' into HEAD
  remigiusz-antczak
  committed
  1c17f38
- Merge commit '1c17f38a0' into HEAD
  remigiusz-antczak
  committed
  a9b8401
- Merge commit 'a9b8401b0' into HEAD
  remigiusz-antczak
  committed
  b947d70
- Merge remote-tracking branch 'origin/main' into HEAD
  
  Remigiusz Antczak
  authored and
  remigiusz-antczak
  committed
  1d7c321
- CI: seed the osv-scanner offline DB for Go as well as npm
  
  remigiusz-antczak
  and
  claude
  committed
  cb8efd2
- Hub: hand osv-scanner go.mod, not go.sum
  
  remigiusz-antczak
  and
  claude
  committed
  cd931a6
- Merge commit 'cd931a639' into HEAD
  remigiusz-antczak
  committed
  121fc06
- Merge remote-tracking branch 'origin/main' into HEAD
  remigiusz-antczak
  committed
  bcecf4b
- Merge commit 'bcecf4b35' into HEAD
  remigiusz-antczak
  committed
  02c401b
- Merge remote-tracking branch 'origin/main' into HEAD
  remigiusz-antczak
  committed
  b43696a
Commits on Nov 15, 2026
- CI: tolerate tool update notices in version pins
  
  remigiusz-antczak
  and
  claude
  committed
  0386f42
- CI: check the mobsfscan semgrep pin via package metadata
  
  Remigiusz Antczak
  and
  claude
  committed
  577d79a

Commits

Commits on Nov 13, 2026

Commits on Nov 14, 2026

Commits on Nov 15, 2026