Releases: digicatapult/veritable-ui
Release list
Release v0.21.113
Changes
Enable Trivy container CVE scan (ENG-314)
Linked Tickets
High Level Description
Enables the Trivy container CVE scan by setting scan_container: true on the shared build-docker call (test and release). The built linux/amd64 image is scanned with a digest-pinned Trivy; the build fails on CRITICAL findings and uploads a JSON report artifact (no GHAS upload). Scan runs in an isolated least-privilege job.
Latest Release v0.21.113
Changes
Enable Trivy container CVE scan (ENG-314)
Linked Tickets
High Level Description
Enables the Trivy container CVE scan by setting scan_container: true on the shared build-docker call (test and release). The built linux/amd64 image is scanned with a digest-pinned Trivy; the build fails on CRITICAL findings and uploads a JSON report artifact (no GHAS upload). Scan runs in an isolated least-privilege job.
What's Changed
- Add migration-checks to test and release by @dblane-digicatapult in #694
- Enable Trivy container CVE scan (ENG-314) by @dblane-digicatapult in #695
Full Changelog: v0.21.111...latest
