Skip to content

Ups - #23

Merged
devops2626 merged 12 commits into
ecc-tools/ai-hack-simulation-conventions-1784778762113from
main
Jul 25, 2026
Merged

Ups#23
devops2626 merged 12 commits into
ecc-tools/ai-hack-simulation-conventions-1784778762113from
main

Conversation

@devops2626

Copy link
Copy Markdown
Owner

Title: chore: suppress CVE-2026-8376 and force linux/amd64 to avoid 32-bit perl issue

This PR:

  • Adds .trivyignore to suppress CVE-2026-8376 until Debian upstream provides a fix.
  • Forces --platform=linux/amd64 on both Dockerfile stages to avoid the 32-bit perl build affected by the CVE.

Rationale:
The perl-base package in the python:3.11-slim base image contains CVE-2026-8376 with no fixed Debian package yet; suppressing the Trivy alert prevents CI failures while forcing the AMD64 platform avoids the 32-bit-only impact of the vulnerability.

No functional code changes beyond the Docker platform pinning and Trivy ignore of the known-but-unfixed base image CVE.

dependabot Bot and others added 11 commits July 25, 2026 01:32
Bumps the pip group with 1 update in the / directory: [flask](https://github.com/pallets/flask).


Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
Bump flask from 3.0.0 to 3.1.3 in the pip group across 1 directory
…onventions-1784778762113

Ecc tools/ai hack simulation conventions 1784778762113
…onventions-1784778762113

Ecc tools/ai hack simulation conventions 1784778762113
Merge pull request #21 from devops2626/main
Merge feature branch with Docker fallback and benchmark framework
Comment thread .github/workflows/test.yml Fixed
@ecc-tools

ecc-tools Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

…ntain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@ecc-tools

ecc-tools Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

@devops2626
devops2626 merged commit 1379d1b into ecc-tools/ai-hack-simulation-conventions-1784778762113 Jul 25, 2026
3 of 11 checks passed
devops2626 added a commit that referenced this pull request Jul 25, 2026
…onventions-1784778762113

Merge pull request #23 from devops2626/main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants