From 1398929e0c2c4acea1d5f6d981e944fd2bde2387 Mon Sep 17 00:00:00 2001 From: Niladri Das Date: Sat, 14 Feb 2026 03:43:11 +0530 Subject: [PATCH 1/3] chore: add coderabbit cli via homebrew --- homebrew-scripts/install-utilities.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/homebrew-scripts/install-utilities.sh b/homebrew-scripts/install-utilities.sh index d2e4ec2..e0fb158 100755 --- a/homebrew-scripts/install-utilities.sh +++ b/homebrew-scripts/install-utilities.sh @@ -12,6 +12,7 @@ brew install htop \ vim \ neovim \ curl \ - git-lfs + git-lfs \ + coderabbit echo "Common utilities installed successfully." From abf42b7f6689e0353bbb81fd213eef3ff6768a5c Mon Sep 17 00:00:00 2001 From: Niladri Das Date: Sat, 14 Feb 2026 03:45:36 +0530 Subject: [PATCH 2/3] fix: add actions read to trivy --- .github/workflows/pre-commit.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 15a6b28..b3d126e 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -91,6 +91,7 @@ jobs: trivy: runs-on: ubuntu-latest permissions: + actions: read contents: read security-events: write steps: From 530f3e1862a53ad269862bf2d3106f8012675986 Mon Sep 17 00:00:00 2001 From: Niladri Das Date: Sat, 14 Feb 2026 03:51:44 +0530 Subject: [PATCH 3/3] fix: use table output for trivy --- .github/workflows/pre-commit.yml | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index b3d126e..dbaae65 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -91,19 +91,13 @@ jobs: trivy: runs-on: ubuntu-latest permissions: - actions: read contents: read - security-events: write steps: - uses: actions/checkout@v6 - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: scan-type: 'fs' - format: 'sarif' - output: 'trivy-results.sarif' - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v4 - if: always() - with: - sarif_file: 'trivy-results.sarif' + format: 'table' + output: 'trivy-results.txt' + continue-on-error: true