diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index b722b78018..0267ba7d8c 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -72,7 +72,7 @@ jobs: run: docker build -t localhost:5000/traceability-foss:fe_${{ github.sha }} -f ./frontend/Dockerfile . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@0.35.0 with: trivyignores: "./.github/workflows/.trivyignore" image-ref: 'localhost:5000/traceability-foss:fe_${{ github.sha }}' @@ -132,7 +132,7 @@ jobs: ref: ${{needs.prepare-env.outputs.check_sha}} - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@0.35.0 with: trivyignores: "./.github/workflows/.trivyignore" scan-type: "config" @@ -180,7 +180,7 @@ jobs: build-args: "ARGS=${{ secrets.PACKAGES_ACCESS_USERNAME }},${{ secrets.PACKAGES_ACCESS_TOKEN }}" - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@0.35.0 with: image-ref: localhost:5000/traceability-foss:trivy trivyignores: "./.github/workflows/.trivyignore"