Skip to content

ci: use GitHub actions#207

Open
DeepDiver1975 wants to merge 5 commits into
masterfrom
ci/use-gh
Open

ci: use GitHub actions#207
DeepDiver1975 wants to merge 5 commits into
masterfrom
ci/use-gh

Conversation

@DeepDiver1975
Copy link
Copy Markdown
Contributor

No description provided.

@DeepDiver1975 DeepDiver1975 force-pushed the ci/use-gh branch 5 times, most recently from f3d093a to 826712e Compare April 2, 2026 15:18
DeepDiver1975 and others added 4 commits May 21, 2026 16:18
…l secret finding

The plain-text .trivyignore format only accepts CVE/rule IDs; a bare file
path is silently ignored. Trivy's secrets scanner flags the snakeoil SSL
private key as HIGH (AsymmetricPrivateKey). Switch to .trivyignore.yaml
which supports path-scoped secrets ignores, and pass it explicitly via
the trivy-ignore-files workflow input.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <1005065+DeepDiver1975@users.noreply.github.com>
QEMU-emulated arm64 takes 10-11x longer than amd64 (654s vs 56s for the
main apt-get install layer). Using GHA cache per-version scope makes
re-runs after trivial changes near-instant instead of 15+ minutes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <1005065+DeepDiver1975@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant