fix: remediate app-layer CVEs in agentex services#164

Open

scale-ballen wants to merge 11 commits intomainfrom

sec/fix-app-vulns

Commits on Mar 11, 2026

sec: migrate standard Dockerfiles to Chainguard golden base images

scale-ballen
and
claude
committed
fix: address Greptile review findings in agentex Dockerfile

scale-ballen
and
claude
committed
fix: use BASE_IMAGE arg to allow CI/local dev without ECR auth

scale-ballen
and
claude
committed
fix: add ECR auth to integration tests for golden base images

scale-ballen
and
claude
committed
fix: use uv sync instead of uv pip install for dependency groups

scale-ballen
and
claude
committed
sec: use minimal ECR read-only role for golden image pulls

scale-ballen
and
claude
committed

Commits on Mar 16, 2026

fix: upgrade vulnerable dependencies across agentex services

scale-ballen
and
claude
committed