Commit Graph
2 Commits
Author SHA1 Message Date
james.maesandCodex 60ce6e4f93 ci: verify the complete printing host runtime inventory
Resolve the selected UI profile once into a Maven CycloneDX graph and fail closed when Trivy or OSV omits packages or returns malformed evidence. Keep existing vulnerability and malicious-package gates.

Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
2026-10-30 20:43:47 -05:00
james.maesandCodex 0028bfdfdc ci: reject missing security scan evidence
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
2026-10-30 19:11:35 -05:00