From c27ab32696110593baa381a9e95000c3bf13a5de Mon Sep 17 00:00:00 2001
From: Chingis S <chingis@chingis.io>
Date: Sat, 24 Oct 2026 12:25:23 +0700
Subject: [PATCH] Verify Brotli fixes in rebuilt images

Check the final image for CVE-2026-111497 before publication using the shared verifier. Refresh inherited packages where needed, accept verified distribution backports, and keep package installation free of Brotli version constraints.
---
 .github/workflows/workflow.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index 935c232..20adadf 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -78,6 +78,10 @@ jobs:
           make
           make test
           echo "image=$(make --no-print-directory -s image-ref)" >> "$GITHUB_OUTPUT"
+      - name: Verify Brotli security fixes
+        uses: wodby/images/.github/actions/check-brotli@4d79323d1d62295e425a222e8cb23ccf843cbbea
+        with:
+          image: ${{ steps.build-image.outputs.image }}
       - name: Scan image
         uses: ./.github/actions/grype
         with: