From 4047b6bec738270f37efa15ac4097c5aa042df5d Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 14 Sep 2026 07:25:04 +0000 Subject: [PATCH 1/3] Initial plan From f214a4de2fe2fb6e19308388b262123226dd98ea Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 14 Sep 2026 07:26:55 +0000 Subject: [PATCH 2/3] Use default buildx builder in devcontainer CI step Co-authored-by: commjoen <1457214+commjoen@users.noreply.github.com> --- .github/workflows/build-devcontainer.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/build-devcontainer.yml b/.github/workflows/build-devcontainer.yml index c19428299..69524174a 100644 --- a/.github/workflows/build-devcontainer.yml +++ b/.github/workflows/build-devcontainer.yml @@ -90,6 +90,8 @@ jobs: # so DO NOT put a tag in imageName here. - name: Build Dev Container uses: devcontainers/ci@v0.3 + env: + BUILDX_BUILDER: default with: imageName: devcontainer-${{ matrix.arch }}-${{ github.sha }} push: never From d4434a2439665b93de4e26431488cd0a9e63bc55 Mon Sep 17 00:00:00 2001 From: Jeroen Willemsen Date: Mon, 14 Sep 2026 09:39:30 +0200 Subject: [PATCH 3/3] always pass even with findings --- .github/workflows/build-devcontainer.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-devcontainer.yml b/.github/workflows/build-devcontainer.yml index 69524174a..ecba20423 100644 --- a/.github/workflows/build-devcontainer.yml +++ b/.github/workflows/build-devcontainer.yml @@ -114,8 +114,8 @@ jobs: image-ref: "${{ env.IMAGE_NAME }}:${{ matrix.arch }}-${{ github.sha }}" format: sarif output: "trivy-${{ matrix.arch }}.sarif" - severity: CRITICAL,HIGH - exit-code: 1 + severity: CRITICAL,HIGH,MEDIM + exit-code: 0 - name: Upload scan results if: always() && hashFiles(format('trivy-{0}.sarif', matrix.arch)) != ''