k.rennerandClaude Opus 4.7
671eada6de
ci/woodpecker/manual/security-scan Pipeline was successful
Pipeline 856's agent run found the Trivy JSON files via the pipeline's own jq summary (IaC=0, Image=645 findings) but the agent itself reported "No Trivy scan files (/tmp/trivy-iac.json ...) were present" — it hallucinated the /tmp prefix and didn't look in the workspace root. Prompt now states explicitly that the JSONs are in the current working directory (project root, not /tmp), and instructs the agent's first action to be `Glob trivy-*.json` to enumerate what exists. Adds a stop-condition for the genuinely-empty case so the agent can't get into a "I'll assume they're somewhere else" loop. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>