fix: eliminate all HIGH/CRITICAL CVEs from Docker images#167

Merged

scale-ballen merged 16 commits intomainfrom

fix/release-workflow-ecr-auth

Mar 20, 2026

Commits on Mar 17, 2026

fix: add ECR authentication to release workflow for golden base images

scale-ballen
and
claude
committed

Commits on Mar 18, 2026

fix: replace private ECR base image with public python:3.12-slim-bookworm

scale-ballen
and
claude
committed
fix: remove stale ECR auth, add Trivy scanning to release workflow

scale-ballen
and
claude
committed
fix: upgrade base image to python:3.12-slim-trixie to eliminate OS vulns

scale-ballen
and
claude
committed
fix: bump deps to resolve HIGH CVEs (PyJWT, protobuf, python-multipart, temporalio)

scale-ballen
and
claude
committed
revert: remove build-agentex.yml workflow changes

scale-ballen
and
claude
committed
fix: resolve merge conflict with PR #170 (Chainguard base image)

scale-ballen
and
claude
committed
fix: bump pyasn1 and tornado to resolve HIGH CVEs

scale-ballen
and
claude
committed
fix: align uv version in Dockerfile with CI workflow (0.6.9 → 0.7.3)

scale-ballen
and
claude
committed
feat: upgrade agentex-sdk from 0.4.18 to 0.9.4

scale-ballen
and
claude
committed
fix: use >= instead of == for agentex-sdk version constraint

scale-ballen
and
claude
committed
fix: eliminate all HIGH/CRITICAL CVEs from Docker images

scale-ballen
and
claude
committed
Merge branch 'main' into fix/release-workflow-ecr-auth
scale-ballen
authored
fix: remove libvips-dev and fix NODE_ENV ordering in agentex-ui Dockerfile

scale-ballen
and
claude
committed

Commits on Mar 19, 2026