From d39230fff253fe13e8636b012f46f1e1c9dae302 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Feb 2022 12:47:01 +0100 Subject: [PATCH] chore(deps): bump aquasecurity/trivy-action from 0.2.1 to 0.2.2 (#355) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/nightly.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/security.yaml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 56fd1a9a5..2b3d5c30f 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -83,7 +83,7 @@ jobs: -t $DOCKER_IMAGE_NAME:ci-scan \ . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.2.1 + uses: aquasecurity/trivy-action@0.2.2 with: image-ref: '${{ env.DOCKER_IMAGE_NAME }}:ci-scan' format: 'table' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 933353c78..a69fba993 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -87,7 +87,7 @@ jobs: -t $DOCKER_IMAGE_NAME:ci-scan \ . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.2.1 + uses: aquasecurity/trivy-action@0.2.2 with: image-ref: '${{ env.DOCKER_IMAGE_NAME }}:ci-scan' format: 'table' diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index 607076db1..4d82b0493 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@v2 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.2.1 + uses: aquasecurity/trivy-action@0.2.2 if: ${{ ! github.event.schedule }} # Do not run inline checks when running periodically with: scan-type: fs @@ -28,7 +28,7 @@ jobs: severity: 'HIGH,CRITICAL' - name: Run Trivy vulnerability scanner sarif output - uses: aquasecurity/trivy-action@0.2.1 + uses: aquasecurity/trivy-action@0.2.2 if: ${{ github.event.schedule }} # Generate sarif when running periodically with: scan-type: fs