3 Commits
Author SHA1 Message Date
cyrilixandClaude Opus 5.5 b554e2e53e chore(ci): bump syft 1.54.1 → 1.55.0
build / build (push) Successful in 34m9s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 20:14:58 +02:00
cyrilixandClaude Opus 5.5 035755f13f ci: upload the SBOM to DependencyTrack for releases only
Manual test builds (test-<sha>) left throwaway project versions in
DependencyTrack; the SBOM is still generated (log shows the component count).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 19:12:08 +02:00
cyrilixandClaude Opus 5.5 79a4e649d1 ci: build the image on Gitea Actions instead of Tekton
Go cross-compilation (CGO off, netgo, vendored, Go 1.27) for amd64/arm64,
crane append onto the pinned distroless/static base (entrypoint, user 1234,
port 8080 set with crane mutate), multi-arch index, CycloneDX SBOM to
DependencyTrack. Tags v[0-9]* or manual runs (test-<sha>).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-13 21:30:54 +02:00