chore: checkpoint 第一版

2026-09-06 17:04:11 +08:00
parent a8cdec98d1
commit 0c2151ace9
659 changed files with 185855 additions and 554 deletions
@@ -84,6 +84,10 @@ docker run --rm -v "${PWD}:/src" -w /src golang:1.26.6-alpine `
 npm --prefix web audit --audit-level=high
 docker run --rm -v "${PWD}:/src" zricethezav/gitleaks:v8.30.1 `
  detect --source=/src --config=/src/.gitleaks.toml --no-banner
+docker run --rm -v "${PWD}:/src" `
+  -v data-terminal-trivy-cache:/root/.cache/trivy aquasec/trivy:0.74.0 `
+  config --ignorefile /src/.trivyignore.yaml --exit-code 1 `
+  --severity HIGH,CRITICAL /src
 docker run --rm -v /var/run/docker.sock:/var/run/docker.sock `
  -v data-terminal-trivy-cache:/root/.cache/trivy aquasec/trivy:0.74.0 `
  image --scanners vuln --ignore-unfixed --severity HIGH,CRITICAL `