From 24d818115ec9f36bc7adc9e0f2d6cdacd33317bf Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 13 May 2026 14:29:05 +0000 Subject: [PATCH] chore(deps): update aquasecurity/trivy-action digest to 314ff8b --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index de7817b..86b8ff7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -214,7 +214,7 @@ jobs: extra_args: --only-verified - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # master + uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master with: scan-type: fs scan-ref: . @@ -228,7 +228,7 @@ jobs: category: trivy - name: Generate SBOM (CycloneDX) - uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # master + uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master with: scan-type: fs scan-ref: . diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7e49def..1b69e1f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -415,7 +415,7 @@ jobs: cosign sign --yes ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build.outputs.digest }} - name: Generate unified SBOM with Trivy - uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # master + uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master with: image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build.outputs.digest }} format: cyclonedx