From 014d060a2bb484f84db0808c4b0aec87124600c7 Mon Sep 17 00:00:00 2001
From: abhishek <at411413@gmail.com>
Date: Wed, 26 Aug 2026 14:16:21 +0000
Subject: [PATCH] patch base image so the trivy gate passes

---
 .gitea/workflows/ci.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index be6a5f1..cfb8807 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -19,6 +19,9 @@ jobs:
         run: |
           cat > Dockerfile <<'DOCKER'
           FROM alpine:latest
+          # the scan below failed until this line was added - patching the base
+          # image is the fix, not lowering the severity threshold
+          RUN apk --no-cache upgrade
           RUN echo "built on $(uname -m)" > /where
           CMD cat /where
           DOCKER