From ec6b39bb919d8f67a1993a35efd8b7f8c1c89b97 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Mon, 9 Nov 2026 09:39:55 -0600 Subject: [PATCH] feat(vuln): point the triage bot's fallback at the pinned scanner ClusterIP Co-Authored-By: Claude Opus 5.5 --- .gitea/workflows/cve-triage.yaml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/cve-triage.yaml b/.gitea/workflows/cve-triage.yaml index ab1b843..5de9f2c 100644 --- a/.gitea/workflows/cve-triage.yaml +++ b/.gitea/workflows/cve-triage.yaml @@ -138,9 +138,8 @@ jobs: RENOVATE_DASHBOARD_ISSUE: "91" VULN_API_URL: http://vuln-scanner.vuln-scanner.svc.cluster.local:8081 # The Service's pinned spec.clusterIP (platform/vuln-scanner/service.yaml), used only - # when the name above fails to resolve. Empty disables the fallback, and a DNS failure - # then fails the job. - VULN_API_FALLBACK_URL: "" + # when the name above fails to resolve. Keep the two in step. + VULN_API_FALLBACK_URL: http://10.43.210.10:8081 VULN_PAGE_URL: https://cve.home.keithjackson.dev # Anything other than an explicit false on a dispatch is a dry run; a schedule is live. DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run != 'false' && 'true' || 'false' }}