TMF/ci-shared
Watch
3
0
Fork
You've already forked ci-shared
 0
Code Pull requests Projects Releases Packages Wiki Activity Actions

chore(ci): pina node, trivy, postgres e redis nas imutáveis 20261009-2e51884 [INFRA-68981] #72

Merged
tmf-ia merged 1 commit from chore/INFRA-68981-pin-node-trivy-bases into develop 2026-10-08 23:46:36 -03:00
Conversation 0 Commits 1 Files changed 4 +8 -8
tmf-ia commented 2026-10-08 23:43:01 -03:00
Owner
Copy link

Segundo lote do pin de imagens (o primeiro, tmf-ci-python, foi o #71). Troca as flutuantes pelas imutáveis publicadas pelo tmf_imagens (runs 43420/43441, commit 2e51884): tmf-ci-node:20-20261009-2e51884, tmf-ci-trivy:0.68.2-db20261009-2e51884 (DB 09/10), tmf-postgres-base:16-20261009-2e51884 e tmf-redis-base:7-20261009-2e51884, nos defaults do ci.yml/ci-base.yml, no reusable-trivy-scan e no reusable-sbom.

⚠️ O Trivy pinado congela o banco: com max_db_age_days=10, o pin vence por volta de 19/10 e precisa ser renovado a cada rebuild semanal. A renovação automática fica em issue própria. Prova: pytest tests (655 passed, 67 skipped).

🤖 Generated with Claude Code

https://claude.ai/code/session_017QrAM1chSgVpSwDrKJVLVn

Segundo lote do pin de imagens (o primeiro, tmf-ci-python, foi o #71). Troca as flutuantes pelas imutáveis publicadas pelo tmf_imagens (runs 43420/43441, commit 2e51884): tmf-ci-node:20-20261009-2e51884, tmf-ci-trivy:0.68.2-db20261009-2e51884 (DB 09/10), tmf-postgres-base:16-20261009-2e51884 e tmf-redis-base:7-20261009-2e51884, nos defaults do ci.yml/ci-base.yml, no reusable-trivy-scan e no reusable-sbom. ⚠️ O Trivy pinado congela o banco: com max_db_age_days=10, o pin vence por volta de 19/10 e precisa ser renovado a cada rebuild semanal. A renovação automática fica em issue própria. Prova: pytest tests (655 passed, 67 skipped). 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_017QrAM1chSgVpSwDrKJVLVn
chore(ci): pina node, trivy, postgres e redis nas tags imutáveis 20261009-2e51884 [INFRA-68981]
All checks were successful
PR checks (ci-shared) / testes (pull_request) Successful in 3m34s
Details
dd471310ef 
Tags publicadas pelos runs 43420/43441 do tmf_imagens (commit 2e51884), digests
conferidos pela sessão TMF Imagens:
- tmf-ci-node:20-20261009-2e51884 (sha256:942835be...)
- tmf-ci-trivy:0.68.2-db20261009-2e51884 (sha256:2f31aff9..., DB de 09/10)
- tmf-postgres-base:16-20261009-2e51884 (sha256:6a106846...)
- tmf-redis-base:7-20261009-2e51884 (sha256:c72f8b9d...)

O Trivy pinado congela o DB: vence pelo max_db_age_days (10 dias) e o pin precisa
ser renovado a cada rebuild semanal (issue própria). Pinar é a regra do padrão de
versionamento para gate de segurança: o falso verde de 08/10 veio de runners com
digests diferentes da mesma tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017QrAM1chSgVpSwDrKJVLVn
tmf-ia merged commit a6f4846a2f into develop 2026-10-08 23:46:36 -03:00
Sign in to join this conversation.
Reviewers
No reviewers
tarcisio
Labels
Clear labels
  
seguranca
Segurança/LGPD — merge só com aprovação do operador

No labels
seguranca
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
TMF/ci-shared!72
No description provided.