feat: scan container images in PR pipelines #32

Merged

KofTwentyTwo merged 1 commits from feature/pr-image-scan into develop

2026-10-13 19:42:28 +00:00

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	b09ced056f	feat: scan container images in PR pipelines New munitor/docker_scan job (image-scan) in the pr-checks workflow of java-webapp, gradle-webapp, node-api and node-webapp: builds the app image and every supplemental image, runs the same Trivy 0.69.3 HIGH/CRITICAL --exit-code 1 scan as the release pipeline (same .trivyignore), stores the JSON results, and never pushes. build_push_supplemental gains push (default true, unchanged behavior). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-13 14:18:41 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

b09ced056f

feat: scan container images in PR pipelines

New munitor/docker_scan job (image-scan) in the pr-checks workflow of
java-webapp, gradle-webapp, node-api and node-webapp: builds the app
image and every supplemental image, runs the same Trivy 0.69.3
HIGH/CRITICAL --exit-code 1 scan as the release pipeline (same
.trivyignore), stores the JSON results, and never pushes.
build_push_supplemental gains push (default true, unchanged behavior).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 14:18:41 -05:00