 Ajin AbrahamandCursor
|
a0f8a0ded1
|
ci/docker: supply-chain Actions updates and Postgres 18 compose layout (#2643)
* ci: bump Actions versions, pin Docker actions, add Dependabot
Keep CI supply chain current after the Docker SBOM work: update test,
publish, and CodeQL workflows, SHA-pin Docker setup/login actions, and
enable weekly GitHub Actions Dependabot updates.
Co-authored-by: Cursor <[email protected]>
* docker: use Postgres latest and PG18 data volume layout
Co-authored-by: Cursor <[email protected]>
* Bump version to 4.5.2
Co-authored-by: Cursor <[email protected]>
---------
Co-authored-by: Cursor <[email protected]>
|
2026-08-09 18:14:05 -07:00 |
|
|
|
a20d60bf12
|
ci: bump docker workflow actions and add SBOM attestations (#2639)
Bump Docker CI action majors across docker-latest.yml, docker-release.yml, and docker-test.yml:
actions/checkout v3 → v7
docker/setup-qemu-action / setup-buildx-action / login-action v3 → v4
docker/build-push-action v5 → pinned v7.3.0 (53b7df96c91f9c12dcc8a07bcb9ccacbed38856a)
Attach SBOM attestations (sbom: true) and pin provenance (provenance: mode=max) on image pushes (:latest and release tags).
Disable provenance on PR test builds (push: false), where registry attestations are not applicable.
---------
Co-authored-by: Ajin Abraham <[email protected]>
Co-authored-by: Cursor <[email protected]>
|
2026-08-09 17:10:24 -07:00 |
|
|
Ajin Abraham
|
2b08dd050e
|
[SECURITY] Security Update + Dependency Bump (#2584)
* Bump Dependencies
* Fix a Stored XSS: GHSA-8hf7-h89p-3pqj
* Remove all | safe in templates and HTML from Python
* Add permissions to Github Actions
|
2026-01-25 22:33:34 -08:00 |
|
|
Ajin.Abraham
|
8a59d6833d
|
HOTFIX: Build and push docker arm64 and amd64 together
|
2024-03-22 18:19:17 -07:00 |
|
|
Ajin.Abraham
|
5a8eeee73c
|
HOTFIX:[SECURITY] Fix GHSA-wfgj-wrgh-h3r3, dep bump, docker build qa
|
2024-03-22 11:49:27 -07:00 |
|
|
Ajin Abraham
|
74f100de90
|
[HOTFIX] Docker Buildx test (#2247)
* Docker image build test for PRs
|
2023-08-26 11:45:39 -07:00 |
|