Skip to content

ci: sign, scan and harden the docker image - #29

Merged
d3vyce merged 1 commit into
mainfrom
ci/image-supply-chain
Nov 14, 2026
Merged

d3vyce merged 1 commit into
mainfrom
ci/image-supply-chain

Conversation

@d3vyce

@d3vyce d3vyce commented Nov 13, 2026

Copy link
Copy Markdown
Contributor

What and why

Checklist

  • Tests for the change; cargo test --workspace passes
  • cargo fmt --all and cargo clippy --workspace --all-targets -- -D warnings are clean
  • .sqlx/, web/openapi.json and web/src/api/schema.d.ts regenerated if queries or the API changed
  • Behaviour changes described for the docs (CI behaviour, configuration, UI)
  • Commits signed off (git commit -s, see CONTRIBUTING.md)

@d3vyce d3vyce self-assigned this Nov 13, 2026
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
d3vyce force-pushed the ci/image-supply-chain branch from 8f11060 to 2f30bc5 Compare November 13, 2026 19:53
@d3vyce d3vyce changed the title ci: sign the image, complete its sbom, scan it for vulnerabilities and pin base images ci: sign, scan and harden the docker image Nov 13, 2026
@d3vyce
d3vyce merged commit d700512 into main Nov 14, 2026
17 checks passed
@d3vyce
d3vyce deleted the ci/image-supply-chain branch November 14, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant