feat(vuln): vuln-scanner platform manifests, Flux tier, alerts, L0/L2/L3 tests

0 Fork 0

Hand-authored platform/vuln-scanner (non-gating Flux tier, digest-pinned Trivy 0.76.1 and
python 3.14.9-alpine, read-only RBAC, per-pod oauth2-proxy, internal-only cve.<domain>),
five alerts with promtool tests, R-VULN-01..09 registry entries, and vuln-* L0 checks with
mutation self-tests. src/ and the bot workflow are integrated separately.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

This commit is contained in:

jakman85andClaude Opus 5.5 committed 2026-11-09 09:42:52 -06:00

1 parent 4c3a284cad

commit b85d1e3ed7

47 files changed

+2572 -6

No files matched your search

									
										platform/cloudflared/networkpolicy.yaml
									
		+1
		
												View File
												
				@@ -147,3 +147,4 @@ spec:

				                - radarr

				                - sonarr

				                - headlamp

				                - vuln-scanner