diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml index 645bd30c..0241a7bb 100644 --- a/.github/workflows/trivy.yaml +++ b/.github/workflows/trivy.yaml @@ -30,7 +30,7 @@ jobs: persist-credentials: false - name: Trivy Vulnerability Scan - uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1 + uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0 with: scan-type: "fs" severity: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL" @@ -41,7 +41,7 @@ jobs: exit-code: 1 - name: Trivy License Scan - uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1 + uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0 with: scan-type: "fs" severity: "HIGH,CRITICAL"