3 Commits

Author	SHA1	Message	Date
ychangkim	607772283d	refactor: scan images directly with trivy, output per-image CVE JSON ... Skip SBOM generation entirely since cve-edge-post.yml only needs vulnerability counts, not CycloneDX artifacts — scan each image with `trivy image` directly and aggregate with python3 (drop jq dependency). Output is now a JSON array with one entry per image instead of a single merged summary.	2026-07-20 18:08:06 +09:00
ychangkim	9b368e4cfc	feat: add jq to sbom pipeline image, rename cve workflow ... jq is required to aggregate trivy-reports/*.json into the CVE summary JSON posted to the edge API.	2026-07-20 17:21:39 +09:00
wbsong111	d6e3d0af79	docs(sbom): add pipeline image Dockerfile + cross-reference from workflow ... .github/workflows/sbom.yml 의 SBOM_PIPELINE_IMAGE 로 사용하는 실행 이미지 Dockerfile 을 doc/scripts/Dockerfile 로 추가(debian/glibc + helm/trivy/python3/git). 워크플로·sbom-pipeline.md 에서 상호 참조하도록 갱신. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-08 13:26:04 +09:00