Claude/add trivy scanning h0 thn#5

Merged

miragecentury merged 9 commits intomainfrom

claude/add-trivy-scanning-H0Thn

Feb 19, 2026

Commits on Feb 19, 2026

fix(ci): use --input flag for trivy OCI archive scan
claude
committed
ci: add Trivy and Dive to PR workflow

miragecentury
and
cursoragent
committed
ci(release): refactor workflows with reusable validate, buildah-only builds

miragecentury
and
cursoragent
committed
fix(ci): scan image from Docker daemon in Trivy step

miragecentury
and
cursoragent
committed
fix: add .trivyignore for base-image CVEs and document security

miragecentury
and
cursoragent
committed
fix: use +0000 in .trivyignore exp dates for Trivy parse

miragecentury
and
cursoragent
committed
ci(trivy): ignore unfixed vulns and scan only library packages

miragecentury
and
cursoragent
committed
ci(trivy): skip base runner externals and scan vuln only

miragecentury
and
cursoragent
committed
ci(trivy): skip base Go binaries and ignore vulns in our CLIs

miragecentury
and
cursoragent
committed