GitHub Actions e643a60c32 fix: remediate supply chain vulnerabilities and implement no-cache builds ...

## Summary
Addresses 8 Medium severity vulnerabilities identified in supply chain scan
for PR #461. Implements no-cache Docker builds to prevent layer caching
issues and remediates golang.org/x/crypto vulnerabilities via replace
directive.

## Changes

### Security Fixes
- Add go.mod replace directive forcing golang.org/x/crypto v0.42.0 -> v0.45.0
  - Addresses GHSA-j5w8-q4qc-rx2x (SSH connection handling)
  - Addresses GHSA-f6x5-jh6r-wrfv (SSH key parsing)
  - Transitive dependency from go-playground/validator/v10@v10.28.0
  - Tested with backend unit tests - all passing

### Docker Build Improvements
- Add no-cache: true to docker-build.yml main build step
- Add --no-cache flag to PR-specific builds (trivy-pr-app-only)
- Add --no-cache flag to waf-integration.yml builds
- Remove GitHub Actions cache configuration (cache-from, cache-to)
- Ensures clean builds with accurate vulnerability

2026-01-11 20:56:44 +00:00

..

api

feat: implement DNS provider detection and related components

2026-01-04 20:04:22 +00:00

development

feat(dns): add custom DNS provider plugin system

2026-01-07 02:54:01 +00:00

features

feat(dns): add custom DNS provider plugin system

2026-01-07 02:54:01 +00:00

guides

feat: implement comprehensive supply chain security with cryptographic verification and documentation

2026-01-10 03:39:25 +00:00

implementation

fix: Enhance supply chain security with updated PR comments, remediation plan, scan analysis, and detailed vulnerability reporting

2026-01-11 20:13:15 +00:00

issues

chore: move processed issue files to created/

2026-01-11 05:33:23 +00:00

plans

fix; CVE-2025-68156 remediation

2026-01-11 19:33:25 +00:00

reports

fix; CVE-2025-68156 remediation

2026-01-11 19:33:25 +00:00

security

fix: remediate supply chain vulnerabilities and implement no-cache builds

2026-01-11 20:56:44 +00:00

troubleshooting

docs: verify React 19.2.3 compatibility with lucide-react

2026-01-07 04:36:37 +00:00

acme-staging.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

AGENT_SKILLS_MIGRATION.md

feat: migrate scripts to Agent Skills following agentskills.io specification

2025-12-20 20:37:16 +00:00

api.md

feat(security): comprehensive SSRF protection implementation

2025-12-23 15:09:22 +00:00

beta_release_draft_pr_body_snapshot.md

fix: Refactor token references in workflows and documentation

2026-01-11 04:27:26 +00:00

beta_release_draft_pr.md

fix: Refactor token references in workflows and documentation

2026-01-11 04:27:26 +00:00

beta_release_pr_body.md

fix: Refactor token references in workflows and documentation

2026-01-11 04:27:26 +00:00

cerberus.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

crowdsec-auto-start-quickref.md

fix(security): resolve CrowdSec startup and permission issues

2025-12-23 01:59:21 +00:00

database-maintenance.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

database-schema.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

debugging-local-container.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

features.md

feat: add JSON template support for all services and fix uptime monitoring reliability

2025-12-24 20:34:38 +00:00

getting-started.md

fix(security): resolve CrowdSec startup and permission issues

2025-12-23 01:59:21 +00:00

github-setup.md

fix: Refactor token references in workflows and documentation

2026-01-11 04:27:26 +00:00

i18n-examples.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

import-guide.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

index.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

live-logs-guide.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

migration-guide-crowdsec-auto-start.md

fix(security): resolve CrowdSec startup and permission issues

2025-12-23 01:59:21 +00:00

migration-guide.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

security-incident-response.md

Update docs/security-incident-response.md

2025-12-23 01:23:54 -05:00

security.md

feat: add JSON template support for all services and fix uptime monitoring reliability

2025-12-24 20:34:38 +00:00

SUPPLY_CHAIN_SECURITY_FIXES.md

docs: comprehensive supply chain security QA audit report

2026-01-10 03:33:38 +00:00

SUPPLY_CHAIN_VULNERABILITY_GUIDE.md

fix: Enhance supply chain security with updated PR comments, remediation plan, scan analysis, and detailed vulnerability reporting

2026-01-11 20:13:15 +00:00