chore: add environment configs and update component versions for Trivy scan#71
chore: add environment configs and update component versions for Trivy scan#71cosmir17 wants to merge 2 commits intogiles-trivyfrom
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
Add preview/preprod/node-dev-01 environments with configs from midnight-node, update postgres to 17.2, cardano-db-sync to 13.6.0.5, and sync pc-chain-config files.
36b2577 to
71506d3
Compare
|
Hey @gilescope, made the tweaks you mentioned - added the missing environments and updated the configs. Let me know if you'd like any adjustments and feel free to make any changes and merge this PR to yours 🙏 |
gilescope
left a comment
There was a problem hiding this comment.
I really want there to be no secrets. If that means there's some envs we don't scan here then that's acceptable.
Images in compose files (midnight-node, cardano) are publicly accessible.
0a28649 to
dfd5d0c
Compare
|
@gilescope Good point - verified the images in the compose files (midnight-node, cardano-node, cardano-db-sync, ogmios, postgres) are all publicly accessible. Removed the GHCR login step to keep it fork-friendly. |
Summary
Builds on #70 to add missing environment configurations and update component versions for the Trivy image scanning workflow.
Changes