Skip to content

ci(dir): extend security scanner to support more tag#1055

Draft
arpad-csepi wants to merge 2 commits intomainfrom
ci/security-scanner-expansion
Draft

ci(dir): extend security scanner to support more tag#1055
arpad-csepi wants to merge 2 commits intomainfrom
ci/security-scanner-expansion

Conversation

@arpad-csepi
Copy link
Member

@arpad-csepi arpad-csepi commented Mar 13, 2026

This changes are extending the security scanner daily runs to check security issues from the latest main commit as well as the latest released version.

@github-actions github-actions bot added the size/XS Denotes a PR that changes 0-49 lines label Mar 13, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Mar 13, 2026

The latest Buf updates on your PR. Results from workflow Buf CI / verify-proto (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped⏩ skipped✅ passedMar 18, 2026, 1:03 AM

@arpad-csepi arpad-csepi linked an issue Mar 13, 2026 that may be closed by this pull request
@arpad-csepi arpad-csepi self-assigned this Mar 13, 2026
@arpad-csepi arpad-csepi force-pushed the ci/security-scanner-expansion branch 3 times, most recently from 45269d8 to e9a4cf3 Compare March 13, 2026 22:39
@github-actions github-actions bot added size/S Denotes a PR that changes 50-199 lines and removed size/XS Denotes a PR that changes 0-49 lines labels Mar 13, 2026
@arpad-csepi arpad-csepi force-pushed the ci/security-scanner-expansion branch 6 times, most recently from 4851924 to 6198e59 Compare March 15, 2026 17:52
@github-actions github-actions bot added size/M Denotes a PR that changes 200-999 lines and removed size/S Denotes a PR that changes 50-199 lines labels Mar 15, 2026
Copy link
Member

@ramizpolic ramizpolic Mar 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can already perform a custom build of images (e.g. ghcr.io/agntcy/dir-apiserver-dev:feat-feat-add-zitadel-chart-253a20c). Lets not reinvent here custom build process. I would suggest the following:

  • the custom image build builds every night one tag ghcr.io/agntcy/dir-apiserver-dev:nightly
  • the security scan can be executed against a nightly build by allowing to select repo-suffix and tag

Options for a security scan:

    1. Scan latest (select latest , sets the repo-suffix and tag appropriately)
    1. Scan nightly (select nighly, sets the repo-suffix and tag appropriately)
    1. Scan custom (input custom repo-suffix and tag)

@arpad-csepi arpad-csepi force-pushed the ci/security-scanner-expansion branch from 6198e59 to 41775f9 Compare March 16, 2026 15:17
@github-actions github-actions bot added size/S Denotes a PR that changes 50-199 lines and removed size/M Denotes a PR that changes 200-999 lines labels Mar 16, 2026
@arpad-csepi arpad-csepi force-pushed the ci/security-scanner-expansion branch 2 times, most recently from 4e3c68f to 8aa3925 Compare March 16, 2026 15:28
Signed-off-by: Árpád Csepi <csepi.arpad@outlook.com>
@arpad-csepi arpad-csepi force-pushed the ci/security-scanner-expansion branch from 8aa3925 to 5166b17 Compare March 16, 2026 15:32
Signed-off-by: Árpád Csepi <csepi.arpad@outlook.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Denotes a PR that changes 50-199 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Expand security scanner to more image versions

2 participants