32
32
- name : Checkout
33
33
uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
34
34
- name : Run Trivy in config mode for deployments
35
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
35
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
36
36
with :
37
37
scan-type : config
38
38
scan-ref : deployments/
50
50
- name : Checkout
51
51
uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
52
52
- name : Run Trivy in config mode for dockerfiles
53
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
53
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
54
54
with :
55
55
scan-type : config
56
56
scan-ref : build/docker/
64
64
- name : Checkout
65
65
uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
66
66
- name : Run Trivy in fs mode
67
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
67
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
68
68
with :
69
69
scan-type : fs
70
70
scan-ref : .
82
82
uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
83
83
- name : Run Trivy in fs mode
84
84
continue-on-error : true
85
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
85
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
86
86
with :
87
87
scan-type : fs
88
88
scan-ref : .
91
91
format : json
92
92
output : trivy-report.json
93
93
- name : Show report in human-readable format
94
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
94
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
95
95
with :
96
96
scan-type : convert
97
97
vuln-type : ' '
@@ -100,7 +100,7 @@ jobs:
100
100
format : table
101
101
- name : Convert report to sarif
102
102
if : ${{ inputs.upload-to-github-security-tab }}
103
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
103
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
104
104
with :
105
105
scan-type : convert
106
106
vuln-type : ' '
@@ -115,7 +115,7 @@ jobs:
115
115
sarif_file : trivy-report.sarif
116
116
- name : Convert report to csv
117
117
if : ${{ inputs.export-csv }}
118
- uses : aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22 .0
118
+ uses : aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2 # 0.23 .0
119
119
with :
120
120
scan-type : convert
121
121
vuln-type : ' '
0 commit comments