stacklok / toolhive-studio / 23596946144

61%

push

github

chore: migrate from Trivy to Grype for vulnerability scanning (#1772)

* chore: migrate from Trivy to Grype for vulnerability scanning

Replace aquasecurity/trivy-action with anchore/scan-action (Grype) v7.3.2
for vulnerability scanning.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: set table format

* format

* chore: grype exclude files

* chore: add only-fixed to grype config for consistent local behaviour

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: add comment to explain only-fixed setting

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: update grype config comments and remove redundant only-fixed from workflow

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Giuseppe Scuglia <peppescg@gmail.com>

2809 of 5044 branches covered (55.69%)

Branch coverage included in aggregate %.

4654 of 7594 relevant lines covered (61.29%)

115.41 hits per line