[Sync] Update project files from source repository (1f83ec3)

[mrz1836]

What Changed

• Updated mage-x version from v1.11.0 to v1.12.2 in .github/.env.base configuration
• Added new MAGE_X_CVE_EXCLUDES environment variable for govulncheck/magex CVE exclusions with default values (CVE-2024-38513, CVE-2023-45142)
• Updated 27 GitHub Actions workflow files to align with latest CI/CD pipeline standards and conventions
• Enhanced security scanning configuration to support CVE exclusion management through both environment variables and command parameters

Why It Was Necessary

• The mage-x v1.12.2 upgrade provides improved dependency auditing capabilities and bug fixes for build tooling
• Centralizing CVE exclusion management through the new MAGE_X_CVE_EXCLUDES variable reduces duplication and provides consistency between Nancy and govulncheck security scanning tools
• Workflow synchronization ensures all CI/CD pipelines benefit from upstream improvements in testing, security scanning, and automation processes
• The CVE exclusion mechanism allows teams to document known acceptable vulnerabilities while maintaining security scanning effectiveness

Testing Performed

• Validated YAML syntax for all 28 modified workflow files
• Verified .github/.env.base configuration follows expected format and variable naming conventions
• Confirmed new MAGE_X_CVE_EXCLUDES variable aligns with existing NANCY_EXCLUDES pattern
• Reviewed workflow job dependencies and trigger conditions remain intact
• Verified mage-x v1.12.2 version exists and is accessible

Impact / Risk

• Low Risk: Configuration updates and workflow synchronization are standard maintenance operations
• No Breaking Changes: New CVE exclusion variable is additive and includes sensible defaults
• Performance: Mage-x v1.12.2 may include performance improvements for build and test operations
• Compatibility: All workflow changes maintain backward compatibility with existing CI/CD processes

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud