From 5c72e0883a28cd652b6e70d063b829bbd77cdd12 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Nov 2023 16:44:14 +1300 Subject: [PATCH] Bump aquasecurity/trivy-action from 0.13.1 to 0.14.0 (#256) --- .github/workflows/build-publish.yml | 2 +- .github/workflows/patch.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml index 1c7c5340..fc72378a 100644 --- a/.github/workflows/build-publish.yml +++ b/.github/workflows/build-publish.yml @@ -122,7 +122,7 @@ jobs: docker push ${{ steps.getref.outputs.ghcr_image_ref }}-unpatched - name: Generate Trivy Report if: matrix.canpatch - uses: aquasecurity/trivy-action@f78e9ecf42a1271402d4f484518b9313235990e1 # v0.13.1 + uses: aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0 # v0.14.0 with: scan-type: 'image' format: 'json' diff --git a/.github/workflows/patch.yml b/.github/workflows/patch.yml index f748e3e1..dd24899e 100644 --- a/.github/workflows/patch.yml +++ b/.github/workflows/patch.yml @@ -91,7 +91,7 @@ jobs: run: docker pull ${{ steps.getref.outputs.ghcr_image_ref }} - name: Generate Trivy Report if: matrix.canpatch - uses: aquasecurity/trivy-action@f78e9ecf42a1271402d4f484518b9313235990e1 # v0.13.1 + uses: aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0 # v0.14.0 with: scan-type: 'image' format: 'json'