feat(container): distroless nonroot multi-arch image + Trivy gate (#491) - #577

Merged

NanaKhadija1980j merged 9 commits into

stellar-vortex-protocol:mainfrom

akindoyinabraham0-collab:feat/491-hardened-container-image

Oct 1, 2026

Commits on Oct 1, 2026

feat(container): distroless nonroot multi-arch base, read-only-FS CMD (#491)
akindoyinabraham0-collab
committed
cac7902
chore(container): harden .dockerignore — exclude docs, CI, editor artefacts (#491)
akindoyinabraham0-collab
committed
0d31d65
ci(container): container smoke test script (boot, /health, intent, read-only FS) (#491)
akindoyinabraham0-collab
committed
3e72298
docs(adr): ADR 0007 — hardened distroless multi-arch image (#491)
akindoyinabraham0-collab
committed
dd69867
test(container): container image conformance e2e tests (#491)
akindoyinabraham0-collab
committed
28b9932
ci(container): per-arch smoke tests + Trivy CVE gate (#491)
akindoyinabraham0-collab
committed
c2d46e0
ci(container): per-arch smoke tests + Trivy CVE gate (#491)
akindoyinabraham0-collab
committed
abeff2f
ci(cd): multi-arch buildx + QEMU + registry cache for distroless build (#491)
akindoyinabraham0-collab
committed
d0fa27d
feat(prisma): add debian+arm64 binaryTargets for distroless image (#491)
akindoyinabraham0-collab
committed
0aa0ccf