mirror of
https://github.com/Quad4-Software/MeshChatX.git
synced 2026-08-18 09:49:09 -04:00
11 lines
539 B
Bash
Executable file
11 lines
539 B
Bash
Executable file
#!/bin/sh
|
|
# Filesystem vulnerability scan for Node (lockfiles, manifests). Replaces pnpm audit
|
|
# while the npm registry legacy audit endpoints are unavailable to pnpm (HTTP 410).
|
|
set -eu
|
|
|
|
# MeshChatX runtime Python deps come from uv.lock (and pip-audit). Vendored trees may
|
|
# ship upstream poetry.lock files for standalone development only. Skip them here.
|
|
exec trivy fs --exit-code 1 --severity HIGH,CRITICAL \
|
|
--skip-dirs .pnpm-store,.venv,temp-tests \
|
|
--skip-files vendor/lxmfy/poetry.lock,vendor/lxmfy/docs/poetry.lock \
|
|
.
|