From 35999b52e6c4b42fd3cb5d037324446d764ed961 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 May 2024 11:34:54 -0500 Subject: [PATCH] chore(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 (#297) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.18.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/84384bd6e777ef152729993b8145ea352e9dd3ef...062f2592684a31eb3aa050cc61e7ca1451cecd3d) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jake Newton --- .github/workflows/trivy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index d7b25f09..5d96e527 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -34,7 +34,7 @@ jobs: docker build -f Dockerfile -t liquibase/liquibase:${{ github.sha }} . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef + uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d with: image-ref: 'liquibase/liquibase:${{ github.sha }}' format: 'sarif' @@ -45,7 +45,7 @@ jobs: docker build -f Dockerfile.alpine -t liquibase/liquibase-alpine:${{ github.sha }} . - name: Run Trivy vulnerability scanner (alpine) - uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef + uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d with: image-ref: 'liquibase/liquibase-alpine:${{ github.sha }}' format: 'sarif'