JonKazama-Hellion/security-workflows
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(scan): merge semgrep + trivy into one job (act_runner race) #1

Merged
JonKazama-Hellion merged 1 commits from fix/sequential-scan-jobs into main 2026-05-11 23:12:56 +00:00
Conversation 0 Commits 1 Files Changed 1
+21 -20

1 Commits

Author SHA1 Message Date
renovate-bot 27c4db980e fix(scan): merge semgrep + trivy into one job to avoid act_runner race 
act_runner v0.6.1 fails when 2 jobs in the same task chown the shared workspace in parallel. Sequential steps inside one job sidestep the issue.

Trivy step uses if: always() so both tools surface findings in a single run.
 2026-05-11 23:11:39 +00:00