Add `--syft` container scan support to `gh aw compile` - #47515

Merged

pelikhan merged 10 commits into

mainfrom

copilot/add-syft-container-vulnerability-scan-tool

Jul 23, 2026

Commits on Jul 23, 2026

Add syft scanner support to compile command

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/add-syft-container-vulnerability-scan-tool
github-actions[bot]
authored
docs(adr): add draft ADR-47515 for Syft SBOM scanner integration

github-actions[bot]
and
claude
authored
Update static analysis workflow for syft

Copilot
and
pelikhan
authored
Address review feedback: add context, error details, SBOM persistence, and tests

Copilot
and
gh-aw-bot
authored
Fix permission constants in syft implementation

Copilot
and
gh-aw-bot
authored
Use strings.NewReplacer for more efficient character replacement

Copilot
and
gh-aw-bot
authored
Fix context cancellation test to use deterministic cancellation

Copilot
and
gh-aw-bot
authored
Merge branch 'main' into copilot/add-syft-container-vulnerability-scan-tool
github-actions[bot]
authored
Pin Syft image to v1.48.0 instead of latest tag

Copilot
and
gh-aw-bot
authored