Cédric VerstraetenandCopilot App e6f0c068da Install pinned scanner without release API credentials ...

Collect native runtime evidence before scanner setup and retain explicit setup failures while keeping security gates fail-closed.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

2026-11-04 22:09:22 +01:00

..

image-evidence.py

Align scratch runtime and releases with image hardening baseline

2026-11-04 22:03:04 +01:00

image-policy.py

Align scratch runtime and releases with image hardening baseline

2026-11-04 22:03:04 +01:00

image-release-policy.json

Align scratch runtime and releases with image hardening baseline

2026-11-04 22:03:04 +01:00

image-release-policy.py

Align scratch runtime and releases with image hardening baseline

2026-11-04 22:03:04 +01:00

install-trivy.sh

Install pinned scanner without release API credentials

2026-11-04 22:09:22 +01:00

test-image-policy.py

Align scratch runtime and releases with image hardening baseline

2026-11-04 22:03:04 +01:00