Skip to content

Commit

Permalink
chore(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 (#89)
Browse files Browse the repository at this point in the history
Bumps
[aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action)
from 0.24.0 to 0.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.28.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump setup-trivy to v0.2.1 by <a
href="https://github.com/DmitriyLewen"><code>@​DmitriyLewen</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/411">aquasecurity/trivy-action#411</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aquasecurity/trivy-action/compare/0.27.0...0.28.0">https://github.com/aquasecurity/trivy-action/compare/0.27.0...0.28.0</a></p>
<h2>v0.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: use <code>setup-trivy</code> to install Trivy by <a
href="https://github.com/DmitriyLewen"><code>@​DmitriyLewen</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/406">aquasecurity/trivy-action#406</a></li>
<li>chore: update description for scanners and format inputs by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/407">aquasecurity/trivy-action#407</a></li>
<li>fix: set envs only when passed by <a
href="https://github.com/knqyf263"><code>@​knqyf263</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/405">aquasecurity/trivy-action#405</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aquasecurity/trivy-action/compare/0.26.0...0.27.0">https://github.com/aquasecurity/trivy-action/compare/0.26.0...0.27.0</a></p>
<h2>v0.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: add usage info about <code>action/cache</code> for trivy
databases by <a
href="https://github.com/DmitriyLewen"><code>@​DmitriyLewen</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/397">aquasecurity/trivy-action#397</a></li>
<li>feat: store artifacts in cache by default by <a
href="https://github.com/knqyf263"><code>@​knqyf263</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/399">aquasecurity/trivy-action#399</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aquasecurity/trivy-action/compare/0.25.0...0.26.0">https://github.com/aquasecurity/trivy-action/compare/0.25.0...0.26.0</a></p>
<h2>v0.25.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(Makefile): recursive option typo by <a
href="https://github.com/chohner"><code>@​chohner</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/371">aquasecurity/trivy-action#371</a></li>
<li>chore: use checks bundle snapshot from trivy-action by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/388">aquasecurity/trivy-action#388</a></li>
<li>Upgrade GitHub actions by <a
href="https://github.com/obounaim"><code>@​obounaim</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/374">aquasecurity/trivy-action#374</a></li>
<li>ci: sync trivy-checks version 1 by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/398">aquasecurity/trivy-action#398</a></li>
<li>feat(trivy): Bump to support v0.56.1 by <a
href="https://github.com/simar7"><code>@​simar7</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/387">aquasecurity/trivy-action#387</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/chohner"><code>@​chohner</code></a> made
their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/371">aquasecurity/trivy-action#371</a></li>
<li><a href="https://github.com/obounaim"><code>@​obounaim</code></a>
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/374">aquasecurity/trivy-action#374</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aquasecurity/trivy-action/compare/0.24.0...0.25.0">https://github.com/aquasecurity/trivy-action/compare/0.24.0...0.25.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2"><code>915b19b</code></a>
chore(deps): bump setup-trivy to v0.2.1 (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/411">#411</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/5681af892cd0f4997658e2bacc62bd0a894cf564"><code>5681af8</code></a>
fix: set envs only when passed (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/405">#405</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/807896715e16054f9ae275ea68a15ee3908f0124"><code>8078967</code></a>
chore: update description for scanners and format inputs (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/407">#407</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/0fa0cdb177a063429d52b85bca1bb4deb7b5c171"><code>0fa0cdb</code></a>
ci: use <code>setup-trivy</code> to install Trivy (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/406">#406</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/a20de5420d57c4102486cdd9578b45609c99d7eb"><code>a20de54</code></a>
feat: store artifacts in cache by default (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/399">#399</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/1b8b83dcc27a38f7d5506919fcea6945aa29b3b8"><code>1b8b83d</code></a>
docs: add usage info about <code>action/cache</code> for trivy databases
(<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/397">#397</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/f781cce5aab226378ee181d764ab90ea0be3cdd8"><code>f781cce</code></a>
feat(trivy): Bump to support v0.56.1 (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/387">#387</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/54f21d8382e6085148450a60ae9f75c608abcbcb"><code>54f21d8</code></a>
ci: sync trivy-checks version 1 (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/398">#398</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/89b14e517dd8699cba3d787e53d4355cad28605c"><code>89b14e5</code></a>
Upgrade GitHub actions (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/374">#374</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/97646fedde05bcd0961217c60b50e23f721e7ec7"><code>97646fe</code></a>
chore: use checks bundle snapshot from trivy-action (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/388">#388</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aquasecurity/trivy-action/compare/0.24.0...0.28.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aquasecurity/trivy-action&package-manager=github_actions&previous-version=0.24.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
  • Loading branch information
nataliagranato authored Nov 19, 2024
2 parents fcf4de3 + c919239 commit 34db948
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/chainguard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@ jobs:
# Scan de segurança com Aqua Security Trivy
- name: Aqua Security Trivy
uses: aquasecurity/trivy-action@0.24.0
uses: aquasecurity/trivy-action@0.28.0
with:
image-ref: nataliagranato/senhas:${{ steps.generate-tag.outputs.tag }}
format: 'sarif'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/giropops-docker.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ jobs:
platforms: linux/amd64,linux/arm64

- name: Aqua Security Trivy
uses: aquasecurity/trivy-action@0.24.0
uses: aquasecurity/trivy-action@0.28.0
with:
image-ref: nataliagranato/linuxtips-giropops-senhas:${{ steps.generate-tag.outputs.tag }}
format: 'sarif'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/redis-docker.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ jobs:
platforms: linux/amd64,linux/arm64

- name: Aqua Security Trivy
uses: aquasecurity/trivy-action@0.24.0
uses: aquasecurity/trivy-action@0.28.0
with:
image-ref: nataliagranato/redis:${{ steps.generate-tag.outputs.tag }}
format: 'sarif'
Expand Down

0 comments on commit 34db948

Please sign in to comment.