Skip to content

Commit

Permalink
Bump aquasecurity/trivy-action from 0.17.0 to 0.19.0
Browse files Browse the repository at this point in the history
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.19.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.17.0...0.19.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
  • Loading branch information
dependabot[bot] committed Apr 1, 2024
1 parent 5d494d5 commit 008b8d6
Show file tree
Hide file tree
Showing 4 changed files with 7 additions and 7 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/scan-with-trivy-config-only.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
uses: actions/checkout@v4

- name: Trivy Misconfiguration - IaC
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
scan-type: config
hide-progress: false
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scan-with-trivy-pr-config-only.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
uses: actions/checkout@v4

- name: Trivy Misconfiguration - IaC
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
scan-type: config
severity: CRITICAL,HIGH,MEDIUM
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/scan-with-trivy-pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
docker build -t docker.io/${{ steps.string.outputs.lowercase }}:${{ github.sha }} .
- name: Run Trivy image vulnerability scanner
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
image-ref: 'docker.io/${{ steps.string.outputs.lowercase }}:${{ github.sha }}'
scan-type: image
Expand Down Expand Up @@ -56,7 +56,7 @@ jobs:
uses: actions/checkout@v4

- name: Trivy Misconfiguration - IaC
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
scan-type: config
severity: CRITICAL,HIGH,MEDIUM
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/scan-with-trivy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
docker build -t docker.io/${{ steps.string.outputs.lowercase }}:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
image-ref: 'docker.io/${{ steps.string.outputs.lowercase }}:${{ github.sha }}'
scan-type: image
Expand All @@ -39,7 +39,7 @@ jobs:
category: 'Trivy Image Vulnerability'

- name: Trivy Misconfiguration - IaC
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
scan-type: config
severity: CRITICAL,HIGH,MEDIUM
Expand All @@ -62,7 +62,7 @@ jobs:
uses: actions/checkout@v4

- name: Run Trivy in GitHub SBOM mode and submit results to Dependency Graph
uses: aquasecurity/trivy-action@0.17.0
uses: aquasecurity/trivy-action@0.19.0
with:
scan-type: 'fs'
format: 'github'
Expand Down

0 comments on commit 008b8d6

Please sign in to comment.