Micron Document
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| SparkN0de-git | SparkN0de |
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Node / ReticulumProjects / MeshChatX.git / commits / 30ea620


Commit 30ea6203f5503543f4730197e8875b56e5269795

󰉖 Browse tree at this commit

Parents : 261963c
Author : Ivan <ivan@quad4.io>
Signature : Invalid signer <e46112d44649266d71fe2193e00a4710>, author is <ivan@quad4.io>
Date : 2026-07-06T23:39:59-05:00

chore(ci): update trivy scan script to skip additional directories and files for improved dependency management

Changes

1 files changed, 6 insertions(+), 1 deletions(-)

M scripts/ci/trivy-fs-scan.sh +6 -1

Diff

diff --git a/scripts/ci/trivy-fs-scan.sh b/scripts/ci/trivy-fs-scan.sh
index f68dee72..45eba086 100644
--- a/scripts/ci/trivy-fs-scan.sh
+++ b/scripts/ci/trivy-fs-scan.sh
@@ -3,4 +3,9 @@
# while the npm registry legacy audit endpoints are unavailable to pnpm (HTTP 410).
set -eu
-exec trivy fs --exit-code 1 --severity HIGH,CRITICAL --skip-dirs .pnpm-store .
+# MeshChatX runtime Python deps come from uv.lock (and pip-audit). Vendored trees may
+# ship upstream poetry.lock files for standalone development only; skip them here.
+exec trivy fs --exit-code 1 --severity HIGH,CRITICAL \
+ --skip-dirs .pnpm-store,.venv,temp-tests \
+ --skip-files vendor/lxmfy/poetry.lock,vendor/lxmfy/docs/poetry.lock \
+ .


──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────