2 Commits

Author	SHA1	Message	Date
MHSanaei	a46bed383c	fix(security): build the scanner image with the Go go.mod requires ... go.mod moved to go 1.27.3 in 775b2b0b, but the OSS Scanner image still started from golang:1.27.2 with GOTOOLCHAIN=local, so its build refused the module.	2026-10-24 12:45:23 +02:00
MHSanaei	eb498a3c13	chore(security): add OSS Scanner build image and threat model ... Anthropic's OSS Scanner builds .oss-scanner/Dockerfile from this repository and audits the image offline. The image keeps the source, the Go module and npm caches, the debug panel binary, Xray-core and the sidecars, so tests, the xray gRPC e2e suite, the master+node e2e and a live panel all run with the network disabled. threat_model.md lists the trust boundaries, entry points and the severity rubric the scanner should report against.	2026-10-11 22:29:36 +02:00