ARUNAVO RAYandGitHub 41592cb8fd fix(ci): skip Docker Scout on fork PRs and add a Trivy scan for every PR (#369) ...

Fork PRs (and Dependabot PRs) never receive repository secrets, so the
Docker Hub login ran with empty credentials and Docker Scout then died
with "user githubactions not entitled to use Docker Scout". Every
external contributor got a red docker check they could not do anything
about (#368, #356, #357, #359).

- Gate the Docker Hub login and both Scout PR steps on the PR coming
  from this repo, the same guard the login/push/comment steps already use.
- Add a Trivy scan of the locally loaded image on every PR. It needs no
  credentials, so forks get real vulnerability feedback. Output goes to
  the job summary because GITHUB_TOKEN is read-only on fork PRs.
- Only upload the Scout SARIF when a file exists, so fork PRs stop
  logging "Path does not exist: scout-results.sarif".
- Update the workflows README, which still described a docker-scan.yml
  that no longer exists.

Not using pull_request_target on purpose: it would run untrusted PR code
with the Docker Hub token available.

2026-08-24 07:52:41 +05:30

..

assets

Redesign dashboard and configuration screens (#353)

2026-08-03 11:27:45 +05:30

ci

refactor: rename skipStarredIssues to starredCodeOnly

2025-10-03 09:22:18 +05:30

screenshots

feat: smart force-push protection with backup strategies (#206)

2026-03-02 15:48:59 +05:30

workflows

fix(ci): skip Docker Scout on fork PRs and add a Trivy scan for every PR (#369)

2026-08-24 07:52:41 +05:30

FUNDING.yml

Create FUNDING.yml

2025-07-17 11:18:04 +05:30