Actions: CodesWhat/drydock
Actions
388 workflow runs
388 workflow runs
grype-image
scan
(added in #441) surfaced, and scopes the Grype image gate so it stays
accurate
going forward.
Before this change the built release image reported **11 critical + 22
high**.
After it: **0 HIGH/CRITICAL outside the two bundled third-party tool
binaries**
(cosign, trivy), which are triaged with a documented,
locat...
🔬 CI Verify
#389:
Commit 6fc0f37
pushed
by
scttbnsn
package.json/package-lock.json rather than the
resolved, shipped dependency set, so it over-reports advisories in
transitive packages the lockfile never resolves to — noise on top of a
redundant paid integration that, in practice, was...
🔬 CI Verify
#387:
Commit c487d99
pushed
by
scttbnsn
drydock
v<version> · <mode> identity line.
## How
- **Build-time bake.** scripts/gen-banner.mjs samples the master logo
(drydock.png) to a 50-cell-wide grid and renders each terminal row as
two pixel rows via the ▀ half-block (upper pixel = foreground, lower =
background)...
🔬 CI Verify
#385:
Commit 330a40f
pushed
by
scttbnsn
drydock.png, repo root) replaces the whale brand
mark across every surface, all regenerated from the single master via
the new committed scripts/regenerate-brand-assets.sh (ImageMagick).
**Replaced (filenames preserved in place):**
- **App UI** (ships in the image): drydock-logo.png, whale-logo.png,
favicon.ico/.svg/-96, apple-touch-icon, PWA manifest icons
- **Website (apps/web) ...
🔬 CI Verify
#383:
Commit bab63f4
pushed
by
scttbnsn
fumadocs-mdx pulled js-yaml@4.1.1
(GHSA-h67p-54hq-rp68, fixed 4.2.0). Override → 4.2.0; postinstall
docs-sync/MDX frontmatter generation runs clean. Clears Dependabot #139.
- **e2e** — artillery pull...
🔬 CI Verify
#381:
Commit 521085e
pushed
by
scttbnsn
release-cut.yml's validator.
rc.37 = rc.36 + #436 (🔧 chore(ci): harden E2E/CI against transient
flakes):
- **Security** — patched the 2026-06-15 transitive CVE batch (vite
CVE-2026-53571/53632, @babel/core CVE-2026-49356, form-data
CVE-2026-12143, protobufjs CVE-2026-54269, ws CVE-2026-48779) via
overrides/...
🔬 CI Verify
#379:
Commit 25b3df8
pushed
by
scttbnsn
drydock only has 6/7 ready containers after 90s — a
registry-latency race, not a code bug (the same tree passed minutes
earlier on the PR). A CI-audit workflow root-caused this and surfaced
related latent flake sources. This PR hardens them at the source so
transient failures stop blocking releases.
## Changes
**Kills the confirmed ...
🔬 CI Verify
#377:
Commit 0490d7e
pushed
by
scttbnsn