apps-registry

3 Commits

Include renames

Author	SHA1	Message	Date
devopsandClaude Sonnet 5	c5abf4a4b7	Merge fix/trivyignore-review-process into main Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_011FqYP3Wf1W63Qmh7qgXAAT	2026-08-16 14:52:09 -05:00
devopsandClaude Sonnet 5	7b872af746	docs(devsecops): proceso de revision de excepciones en .trivyignore Checklist para revisar en cada bump de @medusajs/* si las excepciones documentadas (esbuild/vite via admin-sdk) siguen vigentes o deben removerse. Evita que una excepcion se vuelva permanente por olvido. Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_011FqYP3Wf1W63Qmh7qgXAAT	2026-08-16 14:46:29 -05:00
devopsandClaude Sonnet 5	ac095ff981	fix(devsecops): firmar y verificar imagenes por digest, no por tag Build and Push Medusa / Escaneo de Secretos (Gitleaks) (push) Successful in 58s Details Build and Push Frontend / Escaneo de Secretos (Gitleaks) (push) Successful in 32s Details Build and Push Docs Portal / Escaneo de Secretos (Gitleaks) (push) Successful in 35s Details Build and Push Medusa / Construir y publicar Medusa (push) Successful in 18m58s Details Build and Push Frontend / Construir y Subir Imagen (push) Successful in 12m0s Details Build and Push Docs Portal / Construir y publicar Docs Portal (push) Successful in 5m43s Details Los 3 pipelines (frontend, commerce-backend, docs-portal) ahora capturan el digest real del docker push y lo usan como referencia para cosign sign/verify, en vez del tag mutable :VERSION. Documenta ademas la decision de mantener Rekor deshabilitado (registry privado, evita dependencia de red saliente hacia rekor.sigstore.dev via el tunel). Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_011FqYP3Wf1W63Qmh7qgXAAT	2026-08-16 14:46:01 -05:00