--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
scripts/ci/trivy-fs-scan.sh e41daa5b65e07a5baa1aaad32d97f90482f1cd1c (e41daa5b) Text, 539 B
T8b949e#!/bin/sh
T8b949e# Filesystem vulnerability scan for Node (lockfiles, manifests). Replaces pnpm audit
T8b949e# while the npm registry legacy audit endpoints are unavailable to pnpm (HTTP 410).
Tffa657set -eu
T8b949e# MeshChatX runtime Python deps come from uv.lock (and pip-audit). Vendored trees may
T8b949e# ship upstream poetry.lock files for standalone development only. Skip them here.
Tffa657exec trivy fs --exit-code T79c0ff1 --severity HIGH,CRITICAL Tffea00\
--skip-dirs .pnpm-store,.venv,temp-tests Tffea00\
--skip-files vendor/lxmfy/poetry.lock,vendor/lxmfy/docs/poetry.lock Tffea00\
.
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────