mirror of
https://github.com/getnora-io/nora.git
synced 2026-04-12 10:20:32 +00:00
Trivy image scan had no image-ref, causing it to scan the working directory instead of the Docker image. Also set exit-code: 0 so known vulnerabilities in base images do not block the release.