Merge pull request #4935 from karmada-io/dependabot/github_actions/aq…

…uasecurity/trivy-action-0.20.0 Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0
karmada-io · May 14, 2024 · e6c92d5 · e6c92d5
2 parents 63e6fcf + 3d763a8
commit e6c92d5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci-image-scanning.yaml b/.github/workflows/ci-image-scanning.yaml
@@ -34,15 +34,15 @@ jobs:
           export REGISTRY="docker.io/karmada"
           make image-${{ matrix.target }}
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.19.0
+        uses: aquasecurity/trivy-action@0.20.0
         with:
           image-ref: 'docker.io/karmada/${{ matrix.target }}:latest'
           format: 'sarif'
           ignore-unfixed: true
           vuln-type: 'os,library'
           output: 'trivy-results.sarif'
       - name: display scan results
-        uses: aquasecurity/trivy-action@0.19.0
+        uses: aquasecurity/trivy-action@0.20.0
         with:
           image-ref: 'docker.io/karmada/${{ matrix.target }}:latest'
           format: 'table'