3 Commits

Author	SHA1	Message	Date
lerko	c963acb574	fix(ci): make Grype CVE scan non-blocking for known wish vuln ... GHSA-xjvp-7243-rg9h (wish SCP middleware path traversal) is not exploitable — uptop only uses bubbletea middleware. Scan still runs and warns but won't fail the release.	2026-06-02 11:24:44 -04:00
lerko	3a169b2bcd	ci(docker): add Grype CVE scanning after image push ... Scans published image for Alpine and dependency CVEs. Fails on critical severity, reports all others in table output.	2026-06-01 21:32:20 -04:00
lerko	50eb43971c	refactor(ci): split release pipeline, add nfpm/homebrew/git-cliff ... Split monolithic release.yml into independent workflows: - release-binaries.yml: tag-triggered, GoReleaser + git-cliff notes - release-docker.yml: tag-triggered + manual dispatch, SHA tags Add DEB/RPM packaging via nfpm in GoReleaser. Add Homebrew cask config (skip_upload until macOS builds exist). Replace GoReleaser built-in changelog with git-cliff for structured release notes.	2026-06-01 21:14:54 -04:00