References
This handbook is Nexa-specific. The following primary references support implementation details and should be checked when upgrading tools:
- GitHub reusable workflows
- GitHub secure use of Actions
- Astro Starlight documentation
- Trivy documentation
- Argo CD Image Updater documentation
- Terraform CLI documentation
- Kubeconform
- Semgrep documentation
- SonarQube documentation
- Sigstore Cosign
- OWASP ZAP documentation
Tool versions are centrally pinned in nexa-ci; examples in the handbook illustrate the contract rather than guaranteeing the latest upstream version.