From c18f0b07481ef625cab1106075a3731290d2f366 Mon Sep 17 00:00:00 2001 From: Sacha Al Himdani Date: Wed, 25 Mar 2026 08:52:40 +0100 Subject: [PATCH] Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 Fixes GHSA-69fq-xp46-6x23 (Critical) and GHSA-9p44-j4g5-cfx5 (Medium). Signed-off-by: Sacha Al Himdani --- .github/workflows/make.yaml | 4 ++-- .github/workflows/release.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 8f5242e5c..01581084b 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -52,7 +52,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Scan Docker image with Trivy if: github.ref == 'refs/heads/main' - uses: "aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8" # 0.33.1 + uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # 0.35.0 with: image-ref: "ghcr.io/getprobo/probo:latest-amd64" format: "sarif" @@ -64,7 +64,7 @@ jobs: cache-dir: ~/.cache/trivy - name: Scan Docker image with Trivy if: github.ref != 'refs/heads/main' - uses: "aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8" # 0.33.1 + uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # 0.35.0 with: image-ref: "ghcr.io/getprobo/probo:latest-amd64" format: "table" diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index d698a26f3..79311a8ff 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -79,7 +79,7 @@ jobs: HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }} - name: Scan Docker image with Trivy - uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1 + uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0 with: image-ref: "ghcr.io/getprobo/probo:${{ github.ref_name }}" format: "sarif"