K8s集群运行时自动化运维全覆盖落地实操(下)CI流水线集成扫描:# .gitlab-ci.yml stages: - build - scan - deploy scan_image: stage: scan image: harbor.local/k8s/trivy:0.48.0 script: # 扫描镜像,高危漏洞阻断部署 - trivy image --exit-code 1 --severity HIGH,CRITICAL --no-progress $IMAGE_NAME:$CI_COMMIT_SHORT_SHA # 生成SBOM -