chore(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.2 in /web #19

	# Trivy vulnerability scans: filesystem (source tree) and container image
	# (example deploy image). Findings are surfaced in the GitHub Security tab
	# via SARIF; exit-code is 0 today so we report but do not gate yet.
	# https://github.com/aquasecurity/trivy-action

	name: Trivy security scans

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	schedule:
	- cron: '0 7 * * 3'
	workflow_dispatch:

	jobs:
	trivy-fs:
	name: Trivy filesystem scan
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Run Trivy filesystem scan
	uses: aquasecurity/trivy-action@0.35.0
	with:
	scan-type: fs
	format: sarif
	output: trivy-fs.sarif
	severity: CRITICAL,HIGH
	exit-code: '0'

	- name: Upload Trivy filesystem SARIF
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: trivy-fs.sarif
	category: trivy-fs

	trivy-image:
	name: Trivy container image scan
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Build example deploy image
	run: docker build -t flightdeck-local:scan -f examples/deploy/Dockerfile examples/deploy

	- name: Run Trivy image scan
	uses: aquasecurity/trivy-action@0.35.0
	with:
	scan-type: image
	image-ref: flightdeck-local:scan
	format: sarif
	output: trivy-image.sarif
	severity: CRITICAL,HIGH
	exit-code: '0'

	- name: Upload Trivy image SARIF
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: trivy-image.sarif
	category: trivy-image

Navigation Menu