docs(ci): note the Docker 29.9.1 image
CI / policy (push) Successful in 8s
CI / build (push) Successful in 40s
CI / security (push) Successful in 1m44s
CI / policy (pull_request) Successful in 10s
CI / test (push) Successful in 3m6s
CI / validate (pull_request) Successful in 39s
CI / test (pull_request) Successful in 5m18s
CI / benchmark (push) Successful in 9m44s
CI / build (pull_request) Successful in 1m33s
CI / security (pull_request) Successful in 1m1s
CI / benchmark (pull_request) Successful in 7m56s
CI / validate (push) Successful in 11m34s
CI / images (pull_request) Successful in 2m42s
CI / required (pull_request) Successful in 1s
CI / images (push) Successful in 1m25s
CI / required (push) Successful in 5s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
nessarandClaude Opus 5.5 committed 2026-10-17 21:24:11 +02:00
1 parent 1636355920
commit d9c7f72461
1 file changed
+1 -1
+1 -1
View File
@@ -42,7 +42,7 @@ branch slug; stable promotions share one group and are not cancelled in progress
## Runners and permissions
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image
job uses Docker 29.8.2 and its matching Docker-in-Docker service. Scanner
job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
Trivy downloads its vulnerability database from Aqua's public ECR mirror because
the default registries returned a missing database blob and a download timeout.