Skip to content

Enable OSS Index CVE scanning - #509

Merged
hugohills-regnosys merged 2 commits into
masterfrom
enable-oss-index-cve-scan
Sep 18, 2026
Merged

hugohills-regnosys merged 2 commits into
masterfrom
enable-oss-index-cve-scan

Conversation

@hugohills-regnosys

@hugohills-regnosys hugohills-regnosys commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Enables the Sonatype OSS Index (and Node Audit) analyzer in cve-scanning.yml, matching digital-regulatory-reporting/common-domain-model's CVE scanning setup. Previously both were explicitly disabled here.
  • Uses OSS_INDEX_USERNAME/OSS_INDEX_TOKEN, the naming standard across rune-dsl/rune-common/rune-testing/rosetta-code-generators/rune-fpml/ISO-20022/common-domain-model. These secrets have been added to this repo.

@hugohills-regnosys
hugohills-regnosys merged commit ebb4611 into master Sep 18, 2026
2 checks passed
@hugohills-regnosys
hugohills-regnosys deleted the enable-oss-index-cve-scan branch September 18, 2026 09:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants