From c46f6f4f9e4c11b820c5c34e771c3d466fb5937b Mon Sep 17 00:00:00 2001
From: David Blane <dhblane@gmail.com>
Date: Tue, 14 Jul 2026 17:02:59 +0100
Subject: [PATCH 1/2] Enable Trivy container CVE scan in build-docker (ENG-314)

Sets scan_container: true on the build-docker call(s) so the built amd64
image is scanned with Trivy and the build fails on CRITICAL findings.

ENG-314
---
 .github/workflows/release.yml | 1 +
 .github/workflows/test.yml    | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a01c2291..eec3cad2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,6 +34,7 @@ jobs:
       packages: write
       security-events: write
     with:
+      scan_container: true
       push_dockerhub: true
       push_ghcr: true
       build_args: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d3b76638..426b7a20 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -36,5 +36,6 @@ jobs:
       packages: write
       security-events: write
     with:
+      scan_container: true
       build_args: |
         IPFS_TAG=${{ needs.kubo-version.outputs.ipfs_tag }}

From 1d1afbf2e0058e87c0b4ac025ed672d582eb3db4 Mon Sep 17 00:00:00 2001
From: "dc-autobot[bot]" <181364585+dc-autobot[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 16:03:25 +0000
Subject: [PATCH 2/2] Updating version to 3.0.111

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 304d85c1..003944b5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@digicatapult/sqnc-ipfs",
-  "version": "3.0.110",
+  "version": "3.0.111",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@digicatapult/sqnc-ipfs",
-      "version": "3.0.110",
+      "version": "3.0.111",
       "license": "Apache-2.0",
       "dependencies": {
         "@grpc/grpc-js": "^1.14.4",
diff --git a/package.json b/package.json
index 6bfaaada..b7676360 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@digicatapult/sqnc-ipfs",
-  "version": "3.0.110",
+  "version": "3.0.111",
   "description": "IPFS node for use in SQNC",
   "main": "app/index.js",
   "type": "module",