Skip to content

build: add Component Governance support - #362

Merged
hallvictoria merged 6 commits into
devfrom
hallvictoria/check-vuln
Aug 7, 2026
Merged

build: add Component Governance support#362
hallvictoria merged 6 commits into
devfrom
hallvictoria/check-vuln

Conversation

@hallvictoria

@hallvictoria hallvictoria commented Aug 3, 2026

Copy link
Copy Markdown
Contributor
  • Generates a temporary requirements.txt from pyproject.toml, allowing Component Governance to scan Python dependencies without maintaining duplicate manifests
  • Configures Component Governance to fail the pipeline when a medium-or-higher vulnerability is identified.

@hallvictoria hallvictoria changed the title test: add ex vulnerability build: add Component Governance support Aug 3, 2026
@hallvictoria
hallvictoria marked this pull request as ready for review August 3, 2026 20:49
@hallvictoria
hallvictoria merged commit 6a8b7eb into dev Aug 7, 2026
17 checks passed
@hallvictoria
hallvictoria deleted the hallvictoria/check-vuln branch August 7, 2026 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants