From 10c94f29dd2b522009e8841093a4916541cb3022 Mon Sep 17 00:00:00 2001
From: Username <user@mymx.me>
Date: Mon, 19 Jan 2026 22:58:58 +0100
Subject: [PATCH] ci: fix vuln count to exclude header line

---
 .gitea/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 79136d6..3025dea 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -421,8 +421,8 @@ jobs:
               -u "$HARBOR_USER" -p "$HARBOR_PASS" \
               vulns library flaskpaste -d ${tag} -s high -l 100 > /tmp/high-${tag}.txt 2>&1 || true
 
-            CRITICAL=$(grep -v "N/A *$" /tmp/critical-${tag}.txt 2>/dev/null | grep -c "^CVE\|^GHSA" 2>/dev/null) || CRITICAL=0
-            HIGH=$(grep -v "N/A *$" /tmp/high-${tag}.txt 2>/dev/null | grep -c "^CVE\|^GHSA" 2>/dev/null) || HIGH=0
+            CRITICAL=$(grep -v "N/A *$" /tmp/critical-${tag}.txt 2>/dev/null | grep -cE "^CVE-|^GHSA-" 2>/dev/null) || CRITICAL=0
+            HIGH=$(grep -v "N/A *$" /tmp/high-${tag}.txt 2>/dev/null | grep -cE "^CVE-|^GHSA-" 2>/dev/null) || HIGH=0
 
             echo "  :${tag} - Critical fixable: $CRITICAL, High fixable: $HIGH"