Lucas Manuel Rodriguez 3f541f026b Improve Slack notification for docker image trivy CVE detection (#45232) ...

Current messages looks like this:

<img width="650" height="310" alt="Screenshot 2026-05-12 at 11 14 28 AM"
src="https://github.com/user-attachments/assets/5c85b3e5-f2bf-47f5-8f15-568fac4fd808"
/>

New messages:

<img width="1063" height="464" alt="Screenshot 2026-05-12 at 11 56
45 AM"
src="https://github.com/user-attachments/assets/be728115-4cee-433f-ac4f-2c3eddb1e3e0"
/>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Slack failure notifications now include a deduplicated, formatted
"Detected CVEs" list to speed triage.
* Vulnerability scans emit machine-readable JSON results while still
converting them to human-readable tables for logs.
* Workflows preserve scanner exit codes, add failure-only steps to
extract and aggregate CVEs (including across multiple scan outputs), and
expose a single Slack-ready CVE list.

[![Review Change
Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/fleetdm/fleet/pull/45232)
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-05-12 14:38:59 -03:00

..

actions

Bump picomatch in /.github/actions/eng-metrics (#42432)

2026-04-02 13:45:24 -05:00

ISSUE_TEMPLATE

Remove TODO in story template comments (#44686)

2026-05-05 13:10:55 +01:00

scripts

Standardize macOS app update queries and related automation (#39164)

2026-02-03 17:52:07 -06:00

workflows

Improve Slack notification for docker image trivy CVE detection (#45232)

2026-05-12 14:38:59 -03:00

dependabot.yml

Remove daily schedule so it only gets triggered by security alerts (#14871)

2023-11-02 09:53:40 -05:00

pull_request_template.md

Add retry considerations to PR template and design/qa considerations (#42856)

2026-04-02 11:03:14 -05:00