From f84ae78ade2eab2d7498dfc2a1794caebbc6e3e2 Mon Sep 17 00:00:00 2001
From: Konstantin Renner <konstantin@renner.uno>
Date: Wed, 25 Mar 2026 18:04:30 +0100
Subject: [PATCH] fix: Filter bare 'latest' and fix vlatest tag in image
 discovery

---
 .woodpecker/security-scan.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.woodpecker/security-scan.yml b/.woodpecker/security-scan.yml
index bcbddde7..ba5ebefe 100644
--- a/.woodpecker/security-scan.yml
+++ b/.woodpecker/security-scan.yml
@@ -26,7 +26,8 @@ steps:
           | sed 's/\$${[^}]*:-\([^}]*\)}/\1/g' \
           | sed 's/\$${[^}]*}//g' \
           | sed 's/{{ *[a-z_]* *}}/latest/g' \
-          | grep -v '^$$' | grep -v 'cmd:' | grep -v '{' \
+          | grep -v '^$$' | grep -v '^latest$$' | grep -v 'cmd:' | grep -v '{' \
+          | sed 's/:vlatest/:latest/g' \
           | sort -u > /tmp/images.txt
         echo "Found images to scan:"
         cat /tmp/images.txt