skovati
commented
6 days ago - Condenses docker build into one step (was separated so we could build -> scan -> publish, now it's just build+publish, then scan separately)
- Moves scan into separate GHA job so it can fail independently