security: upgrade some package versions

2026-06-23 03:20:58 +00:00
parent f971c4cdaa
commit ada22e6017
7 changed files with 36 additions and 13 deletions
@@ -48,6 +48,14 @@ jobs:
            --no-progress \
            "gatehouse-api:${{ steps.sha.outputs.tag }}"

+      - name: Scan job image for vulnerabilities (Trivy)
+        run: |
+          trivy image \
+            --exit-code 0 \
+            --severity HIGH,CRITICAL \
+            --no-progress \
+            "gatehouse-api-job:${{ steps.sha.outputs.tag }}"
+
  # ── 2. Deploy ─────────────────────────────────────────────────────────────────
  deploy:
    name: Deploy