diff --git a/.github/workflows/trivy_scan.yml b/.github/workflows/trivy_scan.yml index bcc131210ed..1ec5cc52e0e 100644 --- a/.github/workflows/trivy_scan.yml +++ b/.github/workflows/trivy_scan.yml @@ -27,7 +27,7 @@ jobs: docker pull antrea/antrea-ubuntu:${{ steps.find-antrea-greatest-version.outputs.antrea_version }} - name: Run Trivy vulnerability scanner on latest Antrea Docker image if: ${{ always() && steps.pull.conclusion == 'success' }} - uses: aquasecurity/trivy-action@0.9.2 + uses: aquasecurity/trivy-action@0.10.0 # we cannot use .trivy.yml as we need to override some config parameters # and that is not supported by aquasecurity/trivy-action with: @@ -42,7 +42,7 @@ jobs: output: 'trivy.latest.txt' - name: Run Trivy vulnerability scanner on Antrea Docker image for latest released version if: ${{ always() && steps.pull.conclusion == 'success' }} - uses: aquasecurity/trivy-action@0.9.2 + uses: aquasecurity/trivy-action@0.10.0 with: scan-type: 'image' image-ref: 'antrea/antrea-ubuntu:${{ steps.find-antrea-greatest-version.outputs.antrea_version }}' diff --git a/.github/workflows/trivy_scan_before_release.yml b/.github/workflows/trivy_scan_before_release.yml index 2b7e086f9b7..061029c9c6a 100644 --- a/.github/workflows/trivy_scan_before_release.yml +++ b/.github/workflows/trivy_scan_before_release.yml @@ -15,7 +15,7 @@ jobs: run: | ./hack/build-antrea-linux-all.sh --pull - name: Run Trivy vulnerability scanner on Antrea Docker image - uses: aquasecurity/trivy-action@0.9.2 + uses: aquasecurity/trivy-action@0.10.0 with: scan-type: 'image' image-ref: 'antrea/antrea-ubuntu:latest'