admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

ci(security): exkludera image-SBOM:er från källscanning #401

Merged
siax-bot merged 1 commits from fix/trivy-skip-sbom-evidence-20261101 into main 2026-11-01 08:47:12 +00:00
Conversation 1 Commits 1 Files Changed 3
+7 -3
admin commented 2026-11-01 08:46:58 +00:00
Owner
Copy Link
Copy Source

siax/sbom/ är CycloneDX-evidenens för byggda images, inte källberoenden. Trivy FS återrapporterade gamla image-versioner (next 16.3.x, sharp 0.35.4) och blockerade källfixar som redan är patchade. Image-SBOM:erna verifieras fortsatt i release/image-pipelinen.

`siax/sbom/` är CycloneDX-evidenens för byggda images, inte källberoenden. Trivy FS återrapporterade gamla image-versioner (next 16.3.x, sharp 0.35.4) och blockerade källfixar som redan är patchade. Image-SBOM:erna verifieras fortsatt i release/image-pipelinen.
admin added 1 commit 2026-11-01 08:46:58 +00:00
ci(security): exkludera redan byggda image-SBOM:er från källscanning
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
CI (SIAX Cloud) / integration (push) Skipped
Details
CI (SIAX Cloud) / sonar (push) Skipped
Details
masterplan-lock / check (push) Successful in 3s
Details
masterplan-lock / check (pull_request) Successful in 6s
Details
CI (SIAX Cloud) / security (push) Failing after 18s
Details
CI (SIAX Cloud) / security (pull_request) Failing after 19s
Details
Security Scan (SIAX Cloud) / security (push) Failing after 19s
Details
Security Scan (SIAX Cloud) / security (pull_request) Failing after 33s
Details
CI (SIAX Cloud) / quality (pull_request) Failing after 45s
Details
CI (SIAX Cloud) / quality (push) Failing after 52s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 1m23s
Details
a5f0041bc8
CODEOWNERS rules requested review from sax3l 2026-11-01 08:46:58 +00:00
siax-bot approved these changes 2026-11-01 08:47:09 +00:00
siax-bot left a comment
Collaborator
Copy Link
Copy Source

Godkänd: korrekt separation källscanning vs image-SBOM.

Godkänd: korrekt separation källscanning vs image-SBOM.
siax-bot scheduled this pull request to auto merge when all checks succeed 2026-11-01 08:47:10 +00:00
siax-bot merged commit 6afb55da31 into main 2026-11-01 08:47:12 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
siax-bot
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#401