renovate-bot 27c4db980e fix(scan): merge semgrep + trivy into one job to avoid act_runner race ...

act_runner v0.6.1 fails when 2 jobs in the same task chown the shared workspace in parallel. Sequential steps inside one job sidestep the issue.

Trivy step uses if: always() so both tools surface findings in a single run.

2026-05-11 23:11:39 +00:00

..

security-scan.yml

fix(scan): merge semgrep + trivy into one job to avoid act_runner race

2026-05-11 23:11:39 +00:00