Releases: digicatapult/dtdl-visualisation-tool
Release list
Release v0.9.121
Changes
Enable Trivy container CVE scan (ENG-314)
Linked Tickets
High Level Description
Enables the Trivy container CVE scan by setting scan_container: true on the shared build-docker call (test and release). The built linux/amd64 image is scanned with a digest-pinned Trivy; the build fails on CRITICAL findings and uploads a JSON report artifact (no GHAS upload). Scan runs in an isolated least-privilege job.
Latest Release v0.9.121
Changes
Enable Trivy container CVE scan (ENG-314)
Linked Tickets
High Level Description
Enables the Trivy container CVE scan by setting scan_container: true on the shared build-docker call (test and release). The built linux/amd64 image is scanned with a digest-pinned Trivy; the build fails on CRITICAL findings and uploads a JSON report artifact (no GHAS upload). Scan runs in an isolated least-privilege job.
What's Changed
- Add migration-checks to test and release by @dblane-digicatapult in #604
- Enable Trivy container CVE scan (ENG-314) by @dblane-digicatapult in #605
Full Changelog: v0.9.119...latest
