#9945 ci: Block releases when Grype finds vulnerabilities
Pull request opened by
edgarrmondragon
Description
We can then address or dismiss the vulns and retry the job.
Checklist
• I have read the
contribution guide
Was generative AI tooling used to co-author this PR?
• Yes (please specify the tool below)
Related Issues
• Closes #XXXX
Summary by Sourcery
CI:
• Improve the Grype SARIF scan step to poll GitHub for a valid numeric alert count and use the open-alerts query link, ensuring releases are blocked when vulnerabilities are present.
meltano/meltano