Skip to content

build: add Component Governance support - #362

Open
hallvictoria wants to merge 6 commits into
devfrom
hallvictoria/check-vuln
Open

build: add Component Governance support#362
hallvictoria wants to merge 6 commits into
devfrom
hallvictoria/check-vuln

Conversation

@hallvictoria

@hallvictoria hallvictoria commented Aug 3, 2026

Copy link
Copy Markdown
Contributor
  • Generates a temporary requirements.txt from pyproject.toml, allowing Component Governance to scan Python dependencies without maintaining duplicate manifests
  • Configures Component Governance to fail the pipeline when a medium-or-higher vulnerability is identified.

@hallvictoria hallvictoria changed the title test: add ex vulnerability build: add Component Governance support Aug 3, 2026
@hallvictoria
hallvictoria marked this pull request as ready for review August 3, 2026 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant