carlrobertoh / llm-client

User-friendly Java HTTP client that provides access to large language model APIs and services
https://central.sonatype.com/artifact/ee.carlrobert/llm-client
MIT License
21 stars 29 forks source link

feat: Run trivy security checks after build #26

Closed reneleonhardt closed 6 months ago

reneleonhardt commented 6 months ago

When a new PR would introduce vulnerabilities, for example through old transitive dependencies, the pipeline would fail and the PR could not be merged until all vulnerabilities have been fixed (by upgrading, excluding or overriding dependency versions).