Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0
Fixes GHSA-69fq-xp46-6x23 (Critical) and GHSA-9p44-j4g5-cfx5 (Medium). Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
4
.github/workflows/make.yaml
vendored
4
.github/workflows/make.yaml
vendored
@@ -52,7 +52,7 @@ jobs:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
- name: Scan Docker image with Trivy
|
||||
if: github.ref == 'refs/heads/main'
|
||||
uses: "aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8" # 0.33.1
|
||||
uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # 0.35.0
|
||||
with:
|
||||
image-ref: "ghcr.io/getprobo/probo:latest-amd64"
|
||||
format: "sarif"
|
||||
@@ -64,7 +64,7 @@ jobs:
|
||||
cache-dir: ~/.cache/trivy
|
||||
- name: Scan Docker image with Trivy
|
||||
if: github.ref != 'refs/heads/main'
|
||||
uses: "aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8" # 0.33.1
|
||||
uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # 0.35.0
|
||||
with:
|
||||
image-ref: "ghcr.io/getprobo/probo:latest-amd64"
|
||||
format: "table"
|
||||
|
||||
2
.github/workflows/release.yaml
vendored
2
.github/workflows/release.yaml
vendored
@@ -79,7 +79,7 @@ jobs:
|
||||
HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
|
||||
|
||||
- name: Scan Docker image with Trivy
|
||||
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
|
||||
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
|
||||
with:
|
||||
image-ref: "ghcr.io/getprobo/probo:${{ github.ref_name }}"
|
||||
format: "sarif"
|
||||
|
||||
Reference in New Issue
Block a user