Skip to content

Commit 1a4763b

Browse files
authored
fix: upgrade to Trivy Github action v0.35.0 (#108)
See aquasecurity/trivy-action#541
1 parent 1a5a42c commit 1a4763b

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

.github/workflows/docker-build.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ on:
4141
type: string
4242
trivy-version:
4343
description: "Trivy security scanner version"
44-
default: "v0.69.2"
44+
default: "v0.69.3"
4545
type: string
4646
hadolint:
4747
description: "Enable Hadolint"
@@ -125,7 +125,8 @@ jobs:
125125
- name: Run Trivy vulnerability scanner
126126
id: trivy
127127
if: ${{ inputs.security-scan }}
128-
uses: aquasecurity/trivy-action@0.34.1
128+
# https://github.com/aquasecurity/trivy-action/issues/541
129+
uses: aquasecurity/trivy-action@v0.35.0
129130
with:
130131
image-ref: ${{ inputs.image-name }}:${{ inputs.image-tag }}
131132
format: ${{ (inputs.security-report == 'sarif' && 'sarif') || 'table' }}
@@ -223,7 +224,8 @@ jobs:
223224
224225
- name: Fail build on CRITICAL or HIGH vulnerabilities
225226
if: ${{ inputs.security-scan }}
226-
uses: aquasecurity/trivy-action@0.34.1
227+
# https://github.com/aquasecurity/trivy-action/issues/541
228+
uses: aquasecurity/trivy-action@v0.35.0
227229
with:
228230
image-ref: ${{ inputs.image-name }}:${{ inputs.image-tag }}
229231
format: table

0 commit comments

Comments
 (0)