15abd589a8
All checks were successful
Build and deploy / Validate source (push) Successful in 5s
Build and deploy / Integration suite on a real stack (push) Successful in 2m22s
Build and deploy / Secret scan and release gate (push) Successful in 6s
Build and deploy / Publish images (push) Successful in 55s
The CRITICAL scan of dtf-api failed on a 404 from the database mirror and was reported as a CRITICAL vulnerability. The image step now downloads the database once into a cache volume, with three attempts, scans all four times from it, and exits 5 only on findings: a scan that does not run fails with its own message, and nothing is published unscanned. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>