kevinveenbirkenbachandClaude Opus 5.5 3531b95de0 fix(sys-ctl-hlth-runtime): give the scanners a writable temp dir and keep the workspace databases outside the checkout ...

PR #1326 CI failed in two places:

- The vulnerability-db job stopped on `unable to create listing temp file:
  open /tmp/grype-db-listing…: permission denied`. The repository runs the
  engines as `docker run --user <uid>:<gid>`, and the Grype and Syft images
  set no User and WorkingDir /tmp, which only root may write. The dry-run
  mirror scan failed the same way: 156 Syft errors and the Grype database.
  Every engine now gets TMPDIR pointing at its writable /work mount.
- Every workspace job died in `make system-purge`: `git clean -fdX` could
  not remove build/vulnerability-db, because the job bound that directory
  as its own mount inside the mounted checkout. On GitHub the workspace job
  now keeps its databases under ${RUNNER_TEMP}, outside the checkout; act
  keeps the shared host directory.

Part of #1324

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-01 08:37:10 +01:00

..

cli

fix(ci): share the vulnerability databases with act runs and local deploys

2026-11-01 02:44:59 +01:00

group_vars

fix(svc-prx-openresty): size worker_connections independently of pids_limit

2026-10-31 03:00:03 +01:00

library

fix(database_query): keep psql's command tags out of the returned rows

2026-10-22 20:36:32 +02:00

plugins

test(lookup): restore sys.modules after loading the sso plugins fresh

2026-10-31 02:17:21 +01:00

roles

fix(sys-ctl-hlth-runtime): give the scanners a writable temp dir and keep the workspace databases outside the checkout

2026-11-01 08:37:10 +01:00

scripts

fix(ci): share the vulnerability databases with act runs and local deploys

2026-11-01 02:44:59 +01:00

utils

fix(ci): share the vulnerability databases with act runs and local deploys

2026-11-01 02:44:59 +01:00

__init__.py

…