From 89903e911b4840bb5d8d1b32318c64b137160090 Mon Sep 17 00:00:00 2001 From: "ai-collaboration-app[bot]" <308726528+ai-collaboration-app[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 10:46:22 +0000 Subject: [PATCH 1/2] chore(ci): update image-pipeline scanner pins Use the qualified scanner revision with CSAF-to-OpenVEX conversion for Grype, preserving Rancher suppressions alongside StackVista VEX. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 80dbac1..38392ec 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -178,7 +178,7 @@ jobs: - name: Import release artifacts for scanning run: docker import artifact-scan/rootfs.tar stackstate-backup-cli:security-scan - name: Scan release artifacts with Trivy, Grype, and VEX - uses: StackVista/image-pipeline/.github/actions/scan-image@5eac3de192cbd6ad4225e6799c41ad2741deadd1 # main + uses: StackVista/image-pipeline/.github/actions/scan-image@18d50b5533d4c2829b311dacf579f47e43a0b3fe # main with: image: stackstate-backup-cli:security-scan mode: inform From 8d53c4317a420d072aa13888f0fc4a7685082684 Mon Sep 17 00:00:00 2001 From: "ai-collaboration-app[bot]" <308726528+ai-collaboration-app[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 11:38:14 +0000 Subject: [PATCH 2/2] chore(ci): update image-pipeline scanner pins Use the qualified scanner revision with CSAF-to-OpenVEX conversion for Grype, preserving Rancher suppressions alongside StackVista VEX. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 38392ec..eb3453e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -178,7 +178,7 @@ jobs: - name: Import release artifacts for scanning run: docker import artifact-scan/rootfs.tar stackstate-backup-cli:security-scan - name: Scan release artifacts with Trivy, Grype, and VEX - uses: StackVista/image-pipeline/.github/actions/scan-image@18d50b5533d4c2829b311dacf579f47e43a0b3fe # main + uses: StackVista/image-pipeline/.github/actions/scan-image@508730536961e38718dbc2403448e2d418b1136f # main with: image: stackstate-backup-cli:security-scan mode: inform