diegosouzapw 8adf34bada fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch ...

- .trivyignore: CVE-2025-68121 (Go stdlib crypto/tls inside bogdanfinn/tls-client
  v1.15.1, built with go 1.24.1) with justification, expiry and tracker #12084.
  No upstream rebuild exists; the blocking Trivy gate now also names the ignore
  file explicitly.
- nightly-release-green: close the "not green" issue when the validation passes
  again (the workflow only ever opened/commented it, so stale issues outlived
  the fix and stamped new PRs as base-red inherited).
- scorecard: the action only accepts the DEFAULT branch (the active release
  branch, not main) - guard the job on it so pushes to main stop failing.

Refs #12084

2026-08-30 01:52:04 -03:00

..

build.yml

fix(ci): take the two hosted-runner builds off the PR rail (#11946, option 3) (#11962)

2026-08-28 22:52:15 -03:00

ci.yml

fix(ci): drop the stale ESLint cache restore-keys fallback from ci.yml (#11600) (#11996)

2026-08-29 15:27:39 -03:00

claude.yml

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

codeql.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

dast-smoke.yml

fix(ci): take the two hosted-runner builds off the PR rail (#11946, option 3) (#11962)

2026-08-28 22:52:15 -03:00

deploy-vps.yml

Release v3.8.13 (#3327)

2026-06-06 19:13:11 -03:00

docker-publish.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch

2026-08-30 01:52:04 -03:00

electron-release.yml

fix(release): electron lockfile resync, build_ref, curated notes and SBOM on dispatch (twin of #11982 + #12020) (#12022)

2026-08-29 09:28:03 -03:00

lock-released-branch.yml

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mutation-redundancy.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-compat.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-llm-security.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

nightly-mutation.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-property.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-release-green.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch

2026-08-30 01:52:04 -03:00

nightly-resilience.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

nightly-schemathesis.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

npm-publish.yml

fix(release): electron lockfile resync, build_ref, curated notes and SBOM on dispatch (twin of #11982 + #12020) (#12022)

2026-08-29 09:28:03 -03:00

opencode-plugin-ci.yml

Release v3.8.50

2026-08-26 14:25:01 -03:00

opencode-provider-ci.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

quality.yml

fix(ci): stop hosted docker-publish OOM and unpaint Build (advisory) (#12021)

2026-08-29 09:52:00 -03:00

radar-export.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

scorecard.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch

2026-08-30 01:52:04 -03:00

semgrep.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

wiki-sync.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00