Tobias GesellchenandClaude Sonnet 4.6 90913fffa1 fix(ci): remove nancy from Vulnerability Scan job ...

nancy was installed from github.com/sonatypecommunity/nancy
which is a non-existent package (correct org is
sonatype-nexus-community). nancy v2.0.0 also has replace-
directive issues that break go install.

govulncheck already covers Go CVE scanning via the official
Go vulnerability database, making nancy redundant here.
The nancy-report.json artifact referenced in the upload step
was never actually produced by the pipeline anyway.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 14:49:26 +02:00

..

ISSUE_TEMPLATE

chore: sweep example LAN IPs to RFC-5737 in source and config files

2026-05-17 22:05:13 +02:00

workflows

fix(ci): remove nancy from Vulnerability Scan job

2026-05-24 14:49:26 +02:00

codeql-config.yml

fix(ci): repair invalid codeql-config.yml

2026-05-24 14:15:41 +02:00

dependabot.yml

chore: track all go.mod files in Dependabot

2026-05-24 13:45:05 +02:00

markdown-link-check.json

fix: repair broken links after Jekyll-to-Hugo restructure

2026-05-24 13:30:36 +02:00

pull_request_template.md

docs: sweep example LAN IPs to RFC-5737 documentation range

2026-05-17 22:05:13 +02:00