Sascha Nesterovic nessi
  • Joined on 2025-06-13
nessi closed issue nessi/NexaPG#11 2026-02-14 22:18:06 +00:00
[NX-201] Enforce container vulnerability scan gate in CI
nessi commented on issue nessi/NexaPG#11 2026-02-14 22:18:06 +00:00
[NX-201] Enforce container vulnerability scan gate in CI

NX-201 Completed

Implemented CI enforcement to prevent shipping releases with unresolved container risks.

What was delivered

  • Added container image security scanning for both: …
nessi released NexaPG 0.2.3 - Security update at nessi/NexaPG 2026-02-14 22:14:55 +00:00
nessi pushed tag 0.2.3 to nessi/NexaPG 2026-02-14 22:14:54 +00:00
nessi pushed to main at nessi/NexaPG 2026-02-14 22:12:30 +00:00
21a8023bf1 Merge pull request 'Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout' (#35) from development into main
328f69ea5e Update GitHub Actions workflows for improved functionality
c0077e3dd8 Add -u root flag to container CVE scan workflow
af6ea11079 Refactor Docker Scout integration in CVE scan workflow
5a7f32541f Add Docker Scout login fallback and temporary caching.
Compare 7 commits »
nessi merged pull request nessi/NexaPG#35 2026-02-14 22:12:28 +00:00
Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout
nessi created pull request nessi/NexaPG#35 2026-02-14 22:08:41 +00:00
Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout
nessi pushed to development at nessi/NexaPG 2026-02-14 21:05:01 +00:00
328f69ea5e Update GitHub Actions workflows for improved functionality
nessi pushed to development at nessi/NexaPG 2026-02-14 18:47:37 +00:00
c0077e3dd8 Add -u root flag to container CVE scan workflow
nessi pushed to development at nessi/NexaPG 2026-02-14 18:32:54 +00:00
af6ea11079 Refactor Docker Scout integration in CVE scan workflow
nessi pushed to development at nessi/NexaPG 2026-02-14 18:03:34 +00:00
5a7f32541f Add Docker Scout login fallback and temporary caching.
nessi pushed to development at nessi/NexaPG 2026-02-14 17:55:57 +00:00
dd3f18bb06 Make Docker Scout scans non-blocking and update config paths.
nessi pushed to development at nessi/NexaPG 2026-02-14 17:50:50 +00:00
f4b18b6cf1 Update Docker Hub Scout config to use local login credentials
nessi pushed to main at nessi/NexaPG 2026-02-14 17:45:38 +00:00
a220e5de99 Add Docker Hub authentication for Scout scans
a5ffafaf9e Update CVE scanning workflow to use JSON format and new tools
d17752b611 Add CVE scan workflow for development branch
fe05c40426 Merge branch 'main' of https://git.nesterovic.cc/nessi/NexaPG into development
5a0478f47d harden(frontend): switch to nginx:alpine-slim with non-root runtime and nginx dir permission fixes
Compare 5 commits »
nessi pushed to development at nessi/NexaPG 2026-02-14 17:31:13 +00:00
a220e5de99 Add Docker Hub authentication for Scout scans
nessi pushed to development at nessi/NexaPG 2026-02-14 17:24:11 +00:00
a5ffafaf9e Update CVE scanning workflow to use JSON format and new tools
nessi pushed to development at nessi/NexaPG 2026-02-14 17:16:58 +00:00
d17752b611 Add CVE scan workflow for development branch
nessi pushed to development at nessi/NexaPG 2026-02-14 16:47:38 +00:00
fe05c40426 Merge branch 'main' of https://git.nesterovic.cc/nessi/NexaPG into development
5a0478f47d harden(frontend): switch to nginx:alpine-slim with non-root runtime and nginx dir permission fixes
1cea82f5d9 Merge pull request 'Update frontend to use unprivileged Nginx on port 8080' (#34) from development into main
Compare 3 commits »
nessi pushed tag 0.2.2 to nessi/NexaPG 2026-02-14 16:20:45 +00:00