kert fddb3cce55 add package supply chain scaffold: inventory scanner, drift detector, pipeline spec ...

refs #159 #165 #168

- pkg_inventory.py: scans all Dockerfiles, pyproject.toml, CI workflows
  for apt/apk/pypi/npm packages and emits data/pkg-manifest.json
- pkg_drift.py: compares manifest against fresh scan to detect phantom
  or untracked packages
- pkg-supply-chain.yml: CI-agnostic pipeline definition covering
  inventory → mirror-sync → drift-check → vuln-scan → auto-issues

2026-03-23 23:57:06 -04:00

..

hooks

P19: switchable CI backend — fix #142 #143 #144-#149

2026-03-23 20:40:19 -04:00

pipelines

add package supply chain scaffold: inventory scanner, drift detector, pipeline spec

2026-03-23 23:57:06 -04:00

scripts

add package supply chain scaffold: inventory scanner, drift detector, pipeline spec

2026-03-23 23:57:06 -04:00

seeds

add CI crash diagnostics, API Dockerfile, value set seeds, rustfs policies, loch theme, sigv4 client, and provider attribution table

2026-03-21 22:24:22 -04:00