Tobias GesellchenandClaude Sonnet 4.6 90913fffa1 fix(ci): remove nancy from Vulnerability Scan job ...

nancy was installed from github.com/sonatypecommunity/nancy
which is a non-existent package (correct org is
sonatype-nexus-community). nancy v2.0.0 also has replace-
directive issues that break go install.

govulncheck already covers Go CVE scanning via the official
Go vulnerability database, making nancy redundant here.
The nancy-report.json artifact referenced in the upload step
was never actually produced by the pipeline anyway.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 14:49:26 +02:00

..

ci.yml

ci(deps): bump docker/metadata-action from 6.0.0 to 6.1.0

2026-05-24 13:52:29 +02:00

docs.yml

fix(docs): pass baseURL from configure-pages to Hugo build

2026-05-24 14:08:19 +02:00

release.yml

ci(deps): bump docker/metadata-action from 6.0.0 to 6.1.0

2026-05-24 13:52:29 +02:00

security.yml

fix(ci): remove nancy from Vulnerability Scan job

2026-05-24 14:49:26 +02:00

update-static-deps.yml

build: Add automated dependency management for JavaScript libraries

2026-05-18 22:34:26 +02:00