Repository navigation

ci: add CodeQL and Grype image scan - #872

Merged

ramantehlan merged 17 commits into

mainfrom

Sep 28, 2026

Merged

ci: add CodeQL and Grype image scan#872
ramantehlan merged 17 commits into
mainfrom
sd/image-scan

Commits on Sep 24, 2026
- ci: add CodeQL and Grype image scan workflows
  ramantehlan
  committed
  6a5312e
- ci: grant image scan job the permissions its called workflow needs
  ramantehlan
  committed
  7c2cef0
- ci: call public Grype workflow like CruiseKube
  ramantehlan
  committed
  6b07562
- ci: pass Chart appVersion into the Grype image build
  ramantehlan
  committed
  c42363f
Commits on Sep 28, 2026
- ci: drop the CodeQL workflow for now
  ramantehlan
  committed
  2f0085a
- ci: pass Grype build args as a single line
  ramantehlan
  committed
  37cbd62
- ci: restore the CodeQL workflow
  ramantehlan
  committed
  41173ad
- ci: upload the Grype SARIF report to code scanning
  ramantehlan
  committed
  be40ded
- fix: base the production image on Debian 13
  ramantehlan
  committed
  73e0238
- Revert "fix: base the production image on Debian 13"
  ramantehlan
  committed
  72d7251
- ci: set explicit token permissions on the image scan
  ramantehlan
  committed
  a328955
- ci: let the image scan job open pull requests
  ramantehlan
  committed
  6eaf7a0
- ci: drop pull-requests write from the image scan
  ramantehlan
  committed
  1b066ee
- ci: drop the temporary scan triggers
  ramantehlan
  committed
  6fa1497
- Merge branch 'main' into sd/image-scan
  ramantehlan
  authored
  6df6ffc
- ci: scan the image once and run CodeQL on Monday
  ramantehlan
  committed
  086de23
- ci: drop APP_VERSION from the image scan
  ramantehlan
  committed
  7859453