Skip to content

deps(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the security-actions group across 1 directory#27

Merged
kdairatchi merged 1 commit into
mainfrom
dependabot/github_actions/security-actions-d884b4a175
Apr 25, 2026
Merged

deps(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the security-actions group across 1 directory#27
kdairatchi merged 1 commit into
mainfrom
dependabot/github_actions/security-actions-d884b4a175

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Bumps the security-actions group with 1 update in the / directory: aquasecurity/trivy-action.

Updates aquasecurity/trivy-action from 0.35.0 to 0.36.0

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.36.0

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

Commits
  • ed142fd chore: update action version to v0.36.0 in examples (#563)
  • dea62cf chore(deps): Update trivy to v0.70.0 (#559)
  • 128d9a8 chore: use GitHub Actions as git commit author in bump-trivy workflow (#561)
  • 876cf04 Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #549 (#548)
  • dada784 Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name (#547)
  • 4a2deec fix: use portable shebang in entrypoint.sh (#545)
  • 1994662 chore(deps): bump the actions group with 5 updates (#558)
  • 6b36659 chore: add zizmor config (#557)
  • 316aa5a ci: add dependabot config (#556)
  • 264c9c5 test: use pinned digests for trivy-db, trivy-java-db and trivy-checks (#555)
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 22, 2026

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the security-actions group with 1 update in the / directory: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action).


Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@57a97c7...ed142fd)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the security-actions group deps(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the security-actions group across 1 directory Apr 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/security-actions-d884b4a175 branch from d1b7550 to 74a72c3 Compare April 25, 2026 04:48
@kdairatchi kdairatchi merged commit 586f880 into main Apr 25, 2026
1 check passed
@dependabot dependabot Bot deleted the dependabot/github_actions/security-actions-d884b4a175 branch April 25, 2026 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant