Skip to content

Version Bump for Trivy #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
damienjburks merged 3 commits into from
Apr 14, 2026
Merged

Version Bump for Trivy #16

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
17cc203
Updated Trivy action from v0.31.0 to v0.35.0 and verified the workflo…
Audrey-me Apr 14, 2026
9ad58da
Updated Trivy action from v0.31.0 to v0.35.0 and verified the workflo…
Audrey-me Apr 14, 2026
2d167ff
updated OWASP ZAP scan
Audrey-me Apr 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/unit-sec-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
docker build -t python-fastapi:${{ github.sha }} . ###- This section needed to be added becasue the image was not persisting between jobs--##

- name: Run Trivy Vulnerability Scanner
uses: aquasecurity/trivy-action@0.31.0
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
with:
image-ref: 'python-fastapi:${{ github.sha }}'
format: 'sarif'
Expand Down Expand Up @@ -67,7 +67,7 @@ jobs:

# Run OWASP ZAP scan
- name: zap scan
uses: zaproxy/action-api-scan@v0.9.0
uses: zaproxy/action-api-scan@77dfa9a647bb0f583e39d4df8531634d6ddd8df4
with:
token: ${{ secrets.GITHUB_TOKEN }}
docker_name: 'ghcr.io/zaproxy/zaproxy:stable'
Expand Down