publicWagsHome
/
amcrest2mqtt
mirror of https://github.com/dchesterton/amcrest2mqtt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
353 Commits
6 Branches
16 Tags
807 KiB
dependabot/github_actions/docker/setup-buildx-action-2.5.0
dependabot/pip/python-slugify-8.0.1
dependabot/github_actions/docker/build-push-action-4.0.0
dependabot/github_actions/docker/setup-qemu-action-2.1.0
dependabot/github_actions/docker/login-action-2.1.0
main
1.0.16
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0.10
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'bbf91b82d6'
${ noResults }
Commit Graph

3 Commits (bbf91b82d6823444bd5f95333d885b171f23979a)

Author SHA1 Message Date
Jeff Culverhouse 21925c5688 chore: enhance Trivy security scanning configuration 
- Add ignore-unfixed: true to Trivy workflow to focus on actionable vulnerabilities
- Expand .trivyignore from 1 to 10 CVEs with detailed categorization
- Document why each CVE is ignored (system libraries, unused features)
- Ignore glibc/libtasn1 system library CVEs pending upstream fixes
- Ignore curl CVEs for SSH/OAuth2/LDAP features not used by application
- Ignore OpenLDAP CVE as library is not used by amcrest2mqtt

This aligns with govee2mqtt security configuration and reduces noise
from unfixable or non-applicable security alerts while maintaining
focus on CRITICAL and HIGH severity issues that can be addressed.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
 2 weeks ago
Jeff Culverhouse 8e1cdb313d chore: minor fixes 3 months ago
Jeff Culverhouse 1d52185673 feature: move things around, cleaner code 3 months ago