also looking at this
Gate SBOM findings on whether they ship
#321
5 files
+230
-1
| @@ -283,7 +283,7 @@ jobs: | ||
| 283 | 283 | run: zig fmt --check src/ build.zig |
| 284 | 284 | |
| 285 | 285 | - name: Test failure-safe vulnerability scanning |
| 286 | run: bun test scripts/scan-sbom.test.ts scripts/scan-release-artifacts.test.ts | |
| 286 | run: bun test scripts/scan-sbom.test.ts scripts/scan-release-artifacts.test.ts scripts/sbom-scope.test.ts | |
| 287 | 287 | |
| 288 | 288 | - name: Audit Zig C imports |
| 289 | 289 | run: bun run verify:cimports |