4 Commits

Author	SHA1	Message	Date
ychangkim	607772283d	refactor: scan images directly with trivy, output per-image CVE JSON ... Skip SBOM generation entirely since cve-edge-post.yml only needs vulnerability counts, not CycloneDX artifacts — scan each image with `trivy image` directly and aggregate with python3 (drop jq dependency). Output is now a JSON array with one entry per image instead of a single merged summary.	2026-07-20 18:08:06 +09:00
ychangkim	9b6d978e31	chore: pin sbom pipeline image, use paasup dockerhub secrets ... Switch cve-edge-post.yml to a fixed docker.io/paasup/sbom-pipeline image and paasup-specific Docker Hub credentials, dropping the nvcr.io auth entry.	2026-07-20 17:35:57 +09:00
ychangkim	9b368e4cfc	feat: add jq to sbom pipeline image, rename cve workflow ... jq is required to aggregate trivy-reports/*.json into the CVE summary JSON posted to the edge API.	2026-07-20 17:21:39 +09:00
김영창	25e05e0ba2	Create cve-edge-post.yml	2026-07-20 17:14:51 +09:00