docs(ci): note the Docker 29.9.1 image
CI / policy (push) Successful in 8s
CI / build (push) Successful in 40s
CI / security (push) Successful in 1m44s
CI / policy (pull_request) Successful in 10s
CI / test (push) Successful in 3m6s
CI / validate (pull_request) Successful in 39s
CI / test (pull_request) Successful in 5m18s
CI / benchmark (push) Successful in 9m44s
CI / build (pull_request) Successful in 1m33s
CI / security (pull_request) Successful in 1m1s
CI / benchmark (pull_request) Successful in 7m56s
CI / validate (push) Successful in 11m34s
CI / images (pull_request) Successful in 2m42s
CI / required (pull_request) Successful in 1s
CI / images (push) Successful in 1m25s
CI / required (push) Successful in 5s
CI / policy (push) Successful in 8s
CI / build (push) Successful in 40s
CI / security (push) Successful in 1m44s
CI / policy (pull_request) Successful in 10s
CI / test (push) Successful in 3m6s
CI / validate (pull_request) Successful in 39s
CI / test (pull_request) Successful in 5m18s
CI / benchmark (push) Successful in 9m44s
CI / build (pull_request) Successful in 1m33s
CI / security (pull_request) Successful in 1m1s
CI / benchmark (pull_request) Successful in 7m56s
CI / validate (push) Successful in 11m34s
CI / images (pull_request) Successful in 2m42s
CI / required (pull_request) Successful in 1s
CI / images (push) Successful in 1m25s
CI / required (push) Successful in 5s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
1 parent
1636355920
commit
d9c7f72461
1 file changed
+1
-1
@@ -42,7 +42,7 @@ branch slug; stable promotions share one group and are not cancelled in progress
|
||||
## Runners and permissions
|
||||
|
||||
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image
|
||||
job uses Docker 29.8.2 and its matching Docker-in-Docker service. Scanner
|
||||
job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
|
||||
versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
|
||||
Trivy downloads its vulnerability database from Aqua's public ECR mirror because
|
||||
the default registries returned a missing database blob and a download timeout.
|
||||
|
||||
Reference in new issue
Block a user