- Switch trivy from plugin to commands step so JSON output lands
in shared workspace for S3 upload (#104)
- Add failure: ignore to upload and report steps so they don't
block each other (#105)
- Deploy step depends on scans directly, not uploads
- Add ci label (id=13) to failure issues (#106)
- Add report-failure + report-vulns to rebuild-all.yml (#106)
- New api.diag.vuln module: parses trivy JSON, files Gitea issues
for HIGH/CRITICAL vulns with known fixes, de-duplicates by
image name, 23 tests (#107)
fix#104fix#105 refs #106 refs #107