Kafka Connect: Add Trivy CVE scan to CI#15430

Open

rmoff wants to merge 14 commits intoapache:mainfrom

rmoff:trivy-cve-scan-kafka-connect

Commits on Feb 24, 2026

Commits on Feb 27, 2026

Merge Trivy scan into test job to avoid redundant Gradle build
rmoff
committed

Commits on Mar 13, 2026

Trivy scan: show red step on CVE findings without blocking CI
rmoff
committed

Commits on Mar 20, 2026

Test: add trivy-test-* branch trigger and improve scan comments

rmoff
and
claude
committed
Test: change severity to LOW to simulate no-CVE scenario

rmoff
and
claude
committed
Test: restore exit-code: 0 on SARIF scan, revert severity

rmoff
and
claude
committed
Test: add skip-setup-trivy to SARIF scan step

rmoff
and
claude
committed
Test: run trivy directly for SARIF instead of using action twice

rmoff
and
claude
committed
Test: use full path for trivy binary in SARIF step

rmoff
and
claude
committed
Test: single trivy-action invocation with SARIF + jq summary

rmoff
and
claude
committed
Test: switch to rootfs scan to detect shaded jar CVEs

rmoff
and
claude
committed

Commits on Apr 7, 2026