dadaloop82 68906b2f28 fix: switch to php:8.2-apache-bookworm, add apt upgrade, Trivy ignore-unfixed ...

- Base image: php:8.2-apache → php:8.2-apache-bookworm (Debian 12)
  Reduces OS-level CVEs from ~1200+ to only fixable ones
- Add apt-get upgrade -y before package installs
- Trivy: add ignore-unfixed: true (suppress CVEs with no available fix)
- Pin trivy-action@0.31.0 instead of @master
- Upgrade codeql-action upload-sarif v3 → v4

2026-05-16 07:23:39 +00:00

..

build-kiosk.yml

fix: update check ignores non-semver tags + GitHub Actions builds versioned releases

2026-05-06 14:41:36 +00:00

build-scale-gateway.yml

feat: professional repo cleanup + community infrastructure

2026-05-16 06:02:18 +00:00

ci.yml

ci: auto-merge develop → main after all checks pass

2026-05-03 18:48:20 +00:00

security.yml

fix: switch to php:8.2-apache-bookworm, add apt upgrade, Trivy ignore-unfixed

2026-05-16 07:23:39 +00:00