Add Trivy vulnerability scanning to nightly dev Docker builds#21772

Merged

Kangyan-Zhou merged 6 commits intomainfrom

Mar 31, 2026

Commits on Mar 31, 2026

Add Trivy vulnerability scanning to nightly dev Docker builds

Kangyan-Zhou
and
claude
committed
Use self-hosted runner for Trivy scan to avoid disk space issues

Kangyan-Zhou
and
claude
committed
Fix trivy-action version tag (v0.35.0, not 0.33.1)

Kangyan-Zhou
and
claude
committed
Move Trivy scan to standalone workflow with vuln-only scanning

Kangyan-Zhou
and
claude
committed
Fix shell injection, duplicate scan, and missing step guard in trivy workflow

Kangyan-Zhou
and
claude
committed
Add scan summary to GitHub Step Summary for visibility

Kangyan-Zhou
and
claude
committed