KaifAhmad1 c502db50d0 fix: match container-scan.yml's push paths to what actually reaches the image ...

The path filter only watched explorer/package.json and package-lock.json,
but Dockerfile COPYs the whole explorer/ tree plus README.md, LICENSE, and
MANIFEST.in, and .dockerignore controls all of it. A frontend source change
or a README/LICENSE edit would change the built image without triggering a
scan, silently drifting until the next weekly run. Replace the filter with
exactly .dockerignore's opt-in list.

2026-08-30 21:34:02 +05:30

..

benchmark.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

ci.yml

feat(explorer): add deterministic rendering E2E example and test (#1037) (#1041)

2026-08-29 12:25:58 +05:00

codeql.yml

fix(security): resolve Scorecard vulnerability and token-permission alerts (#1280)

2026-08-30 20:58:39 +05:30

container-scan.yml

fix: match container-scan.yml's push paths to what actually reaches the image

2026-08-30 21:34:02 +05:30

defender-for-devops.yml

fix(security): resolve Scorecard vulnerability and token-permission alerts (#1280)

2026-08-30 20:58:39 +05:30

docs.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30

install-matrix.yml

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

release.yml

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

scorecard.yml

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

security-scan.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

security.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

verify-action-pins.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30