3 commits

Author	SHA1	Message	Date
Adil Hafeez	c866a04230	Fix 27 HIGH vulnerabilities found by Trivy Docker scan ... - Install supervisor via pip instead of apt to eliminate 22 Debian python3.13 package vulnerabilities - Pin urllib3>=2.6.3 to fix CVE-2025-66418, CVE-2025-66471, CVE-2026-21441 - Add ignore-unfixed to Trivy scan to suppress unfixable glibc CVE-2026-0861 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 00:08:04 +00:00
Adil Hafeez	4aa7bd5767	Add explicit permissions to Docker security scan workflow ... Set minimal permissions: contents read for checkout, security-events write for SARIF upload to the GitHub Security tab. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-13 15:46:05 -08:00
Adil Hafeez	c7c9eb242a	Add Trivy Docker image security scan workflow ... Scans the Docker image for CRITICAL and HIGH vulnerabilities using Trivy. Blocks PRs on failures; runs non-blocking on main for visibility. Results are uploaded to the GitHub Security tab via SARIF. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-13 15:44:31 -08:00