CI: check-for-patched-cves task uses git-lfs

[aramprice]

NOTE: pipeline already configured.

Fixes:

2026-04-11T12:59:09Z	INFO	[bundler] Detecting vulnerabilities...
error: Your local changes to the following files would be overwritten by checkout:
	src/bosh_aws_cpi/vendor/package/multi_json-1.20.0.gem
Please commit your changes or stash them before you switch branches.
Aborting

^ https://bosh.ci.cloudfoundry.org/teams/main/pipelines/bosh-aws-cpi/jobs/automatically-release-new-patch/builds/72#L69b9f627:7:10

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 969d0f69-4846-4fd8-af91-e40594330ad7

📥 Commits

Reviewing files that changed from the base of the PR and between af98d7b and d4ee36e.

📒 Files selected for processing (1)

• ci/pipeline.yml

---

Walkthrough

A single parameter ENABLE_GIT_LFS: true has been added to the params block of the check-for-patched-cves task within the automatically-release-new-patch job in ci/pipeline.yml. This parameter enables Git Large File Storage functionality for this specific pipeline task. No modifications were made to task logic, ordering, or control flow.

Suggested reviewers

• mkocher
• s4heid
• KauzClay

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: enabling git-lfs for the check-for-patched-cves CI task, which directly matches the changeset.
Description check	✅ Passed	The description provides context about the CI failure that motivated the change, directly relating to the git-lfs parameter addition and the git checkout error encountered.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch use-git-lfs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Updates the Concourse pipeline to prevent the check-for-patched-cves task from failing due to git working tree changes related to Git LFS content during vulnerability scanning.

Changes:

• Enable Git LFS usage for the check-for-patched-cves task via a new task param.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.