diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 4451be0..fcb22f8 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -27,7 +27,7 @@ jobs: gh-token: ${{ secrets.GITHUB_TOKEN }} - name: 'Run Trivy vulnerability scanner in repo mode' - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 if: always() # docker run --rm -v trivy_cache:/root/.cache/ aquasec/trivy fs --debug --format table --exit-code 1 --ignore-unfixed --vuln-type os,library --scanners vuln,secret --severity CRITICAL,HIGH . with: @@ -41,7 +41,7 @@ jobs: cache-dir: .trivy - name: 'Run Trivy vulnerability scanner in IaC mode' - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 if: always() # docker run --rm -v trivy_cache:/root/.cache/ aquasec/trivy config --debug --format table --exit-code 1 --severity CRITICAL,HIGH . with: