denshooter
c4bc27273e
Some checks failed
- Update CI/CD workflow to use specific Trivy version and change output format for vulnerability results. - Add fallback npm audit step in case Trivy scan fails. - Create a new security scan workflow that runs on push and pull request events, including scheduled scans. - Introduce a security scan script to perform npm audit, Trivy scans, and check for potential secrets in the codebase. - Ensure results are uploaded as artifacts for review and maintain retention policies for scan results.