@@ -196,7 +196,7 @@ jobs:
196
196
tar -xf image.tar -C image
197
197
198
198
- name : Run Trivy vulnerability scanner
199
- uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32.0
199
+ uses : aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
200
200
env :
201
201
TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
202
202
TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -213,7 +213,7 @@ jobs:
213
213
retention-days : 5
214
214
215
215
- name : Upload Trivy scan results to GitHub Security tab
216
- uses : github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
216
+ uses : github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
217
217
with :
218
218
sarif_file : trivy-results.sarif
219
219
@@ -351,7 +351,7 @@ jobs:
351
351
fi
352
352
353
353
- name : Run Trivy vulnerability scanner
354
- uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32.0
354
+ uses : aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
355
355
env :
356
356
TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
357
357
TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -369,7 +369,7 @@ jobs:
369
369
retention-days : 5
370
370
371
371
- name : Upload Trivy scan results to GitHub Security tab
372
- uses : github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
372
+ uses : github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
373
373
with :
374
374
sarif_file : trivy-results.sarif
375
375
@@ -475,7 +475,7 @@ jobs:
475
475
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" | jq
476
476
477
477
- name : Run Trivy vulnerability scanner
478
- uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32.0
478
+ uses : aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
479
479
env :
480
480
TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
481
481
TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -493,6 +493,6 @@ jobs:
493
493
retention-days : 5
494
494
495
495
- name : Upload Trivy scan results to GitHub Security tab
496
- uses : github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
496
+ uses : github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
497
497
with :
498
498
sarif_file : trivy-results.sarif
0 commit comments