Files
Charon/.github/workflows
GitHub Actions 18868a47fc fix: add pull:true to docker-publish for fresh base images
The docker-publish.yml workflow was missing pull:true, causing it
to use cached Alpine images with vulnerable c-ares 1.34.5-r0.

This completes the fix across all three Docker workflows:
- docker-build.yml ✓
- docker-publish.yml ✓ (this commit)
- security-weekly-rebuild.yml ✓

Resolves CVE-2025-62408 (c-ares)
2025-12-14 06:28:47 +00:00
..