Skip to content

Commit e8c2dfe

Browse files
authored
Upgrade Trivy action to version 0.35.0
Updated Trivy action version to v0.35.0 for vulnerability scans.
1 parent e5407d8 commit e8c2dfe

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

.github/workflows/security.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
fi
3434
3535
- name: Run Trivy vulnerability scan
36-
uses: aquasecurity/trivy-action@0.28.0
36+
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
3737
with:
3838
scan-type: 'fs'
3939
scan-ref: '.'
@@ -42,7 +42,7 @@ jobs:
4242
severity: 'CRITICAL,HIGH,MEDIUM,LOW'
4343
exit-code: '0'
4444
- name: Check for critical and high vulnerabilities
45-
uses: aquasecurity/trivy-action@0.28.0
45+
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
4646
with:
4747
scan-type: 'fs'
4848
scan-ref: '.'
@@ -111,4 +111,4 @@ jobs:
111111
name: bandit-sarif-results
112112
path: results.sarif
113113
retention-days: 30
114-
continue-on-error: true
114+
continue-on-error: true

0 commit comments

Comments
 (0)