feature: pipeline governance hardening — secrets, build provenance, Flyway schema control, change control, audit logging - #294

Open

achalc wants to merge 3 commits into

devin/1787578544-govern-pipeline-hardening

Commits on Aug 24, 2026

feature: harden pipeline governance (secrets, provenance, Flyway, change control, audit logging)
devin-ai-integration[bot]
committed
45859ae
bug: pin trivy-action to an existing tag (v0.33.1) so the scan job resolves
devin-ai-integration[bot]
committed
b730cf1
bug: run Trivy from the pinned container and split the misconfiguration gate
devin-ai-integration[bot]
committed
2b5477d