Gauvino 44492876b3 ci(security): add Trivy filesystem scan to code scanning ...

Streamyfin ships no container image, so this runs a Trivy *filesystem* scan
(vulnerable deps, secrets, misconfig) and uploads SARIF to GitHub code scanning,
complementing CodeQL and dependency-review. Runs on push to develop/master,
weekly, and on demand (not on PRs — fork PRs can't upload SARIF, and
dependency-review already gates PR dependencies). Reports findings (CRITICAL/HIGH,
ignore-unfixed) without failing the build; the Security tab surfaces them.

2026-06-01 17:31:29 +02:00

..

ISSUE_TEMPLATE

chore: Add version 0.47.1 to issue report template (#1251)

2025-12-01 16:27:33 +01:00

workflows

ci(security): add Trivy filesystem scan to code scanning

2026-06-01 17:31:29 +02:00

CONTRIBUTING.md

docs: Add AI Assistance Disclosure Clause

2025-10-24 10:01:36 +02:00

copilot-instructions.md

docs: remove markdown link formatting from commit guide

2025-10-19 22:45:23 +02:00

pull_request_template.md

chore: update pr template

2026-05-30 10:41:24 +02:00

renovate.json

chore(deps): migrate to Expo SDK 56 (Phase 1 - compat)

2026-05-28 23:56:03 +02:00