Chris Lu 43f5916a1d ci: add Trivy CVE scan to container release workflow (#8820) ...

* ci: add Trivy CVE scan to container release workflow

* ci: pin trivy-action version and fail on HIGH/CRITICAL CVEs

Address review feedback:
- Pin aquasecurity/trivy-action to v0.28.0 instead of @master
- Add exit-code: '1' so the scan fails the job on findings
- Add comment explaining why only amd64 is scanned

* ci: pin trivy-action to SHA for v0.35.0

Tags ≤0.34.2 were compromised (GHSA-69fq-xp46-6x23). Pin to the full
commit SHA of v0.35.0 to avoid mutable tag risks.

2026-03-28 21:10:57 -07:00

..

binaries_dev.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release0.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release1.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release2.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release3.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release4.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

binaries_release5.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

codeql.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

container_dev.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

container_foundationdb_version.yml

build(deps): bump docker/setup-qemu-action from 3 to 4 (#8574)

2026-03-09 11:33:38 -07:00

container_latest.yml

ci: add Trivy CVE scan to container release workflow (#8820)

2026-03-28 21:10:57 -07:00

container_release_foundationdb.yml

build(deps): bump docker/metadata-action from 5 to 6 (#8652)

2026-03-16 10:46:36 -07:00

container_release_unified.yml

build(deps): bump docker/metadata-action from 5 to 6 (#8652)

2026-03-16 10:46:36 -07:00

container_rocksdb_version.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

deploy_telemetry.yml

build(deps): bump org.apache.zookeeper:zookeeper from 3.9.4 to 3.9.5 in /test/java/spark (#8580)

2026-03-09 17:29:53 -07:00

depsreview.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

e2e.yml

Fix nil pointer crash during concurrent vacuum compaction (#8592)

2026-03-10 13:31:45 -07:00

ec-integration-tests.yml

go 1.25

2026-03-09 23:10:27 -07:00

ec-integration.yml

Update ec-integration.yml

2026-03-09 14:05:39 -07:00

fuse-integration.yml

mount: stream all filer mutations over single ordered gRPC stream (#8770)

2026-03-25 20:06:34 -07:00

go.yml

Fix nil pointer crash during concurrent vacuum compaction (#8592)

2026-03-10 13:31:45 -07:00

helm_ci.yml

build(deps): bump actions/checkout from 4 to 6 (#8738)

2026-03-23 10:50:22 -07:00

helm_manual_release.yml

feat(ci): publish helm chart to ghcr (#8697)

2026-03-19 05:50:15 -07:00

java_integration_tests.yml

S3: Implement IAM defaults and STS signing key fallback (#8348)

2026-02-16 13:59:13 -08:00

java_unit_tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

kafka-quicktest.yml

go 1.25

2026-03-09 23:10:27 -07:00

kafka-tests.yml

go 1.25

2026-03-09 23:10:27 -07:00

kms-tests.yml

fix: serialize SSE-KMS metadata when bucket default encryption applies KMS (#8780)

2026-03-26 14:07:01 -07:00

metadata-subscribe-tests.yml

Fix nil pointer crash during concurrent vacuum compaction (#8592)

2026-03-10 13:31:45 -07:00

plugin-workers.yml

Add plugin worker integration tests for erasure coding (#8450)

2026-02-25 22:11:41 -08:00

postgres-tests.yml

go 1.25

2026-03-09 23:10:27 -07:00

rust_binaries_dev.yml

Rust volume server implementation with CI (#8539)

2026-03-26 17:24:35 -07:00

rust_binaries_release.yml

Rust volume server implementation with CI (#8539)

2026-03-26 17:24:35 -07:00

rust-volume-server-tests.yml

Rust volume server implementation with CI (#8539)

2026-03-26 17:24:35 -07:00

s3-example-integration-tests.yml

Preserve explicit directory markers with octet-stream MIME (#8726)

2026-03-21 19:31:56 -07:00

s3-filer-group-tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

s3-go-tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

s3-iam-tests.yml

iam: add IAM group management (#8560)

2026-03-09 11:54:32 -07:00

s3-keycloak-tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

s3-mutation-regression-tests.yml

ci: add S3 mutation regression coverage (#8804)

2026-03-28 20:17:20 -07:00

s3-parquet-tests.yml

go 1.25

2026-03-09 23:10:27 -07:00

s3-policy-tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

s3-proxy-signature-tests.yml

build(deps): bump docker/setup-buildx-action from 3 to 4 (#8570)

2026-03-09 11:12:56 -07:00

s3-spark-tests.yml

Preserve explicit directory markers with octet-stream MIME (#8726)

2026-03-21 19:31:56 -07:00

s3-sse-tests.yml

build(deps): bump actions/upload-artifact from 6 to 7 (#8482)

2026-03-02 10:27:57 -08:00

s3-tables-tests.yml

build(deps): bump docker/setup-buildx-action from 3 to 4 (#8570)

2026-03-09 11:12:56 -07:00

s3tests.yml

Remove allowEmptyFolder from s3tests.yml workflow

2025-12-06 21:59:00 -08:00

sftp-tests.yml

Fix nil pointer crash during concurrent vacuum compaction (#8592)

2026-03-10 13:31:45 -07:00

spark-integration-tests.yml

build(deps): bump dorny/test-reporter from 2 to 3 (#8733)

2026-03-23 09:16:38 -07:00

telemetry-integration.yml

fix(telemetry): use correct TopologyId field in integration test (#8714)

2026-03-20 22:15:05 -07:00

test-s3-over-https-using-awscli.yml

go 1.25

2026-03-09 23:10:27 -07:00

tus-tests.yml

Fix TUS chunked upload and resume failures (#8783) (#8786)

2026-03-26 14:06:21 -07:00

volume-server-integration-tests.yml

Fix nil pointer crash during concurrent vacuum compaction (#8592)

2026-03-10 13:31:45 -07:00