@@ -103,7 +103,7 @@ runs:
103103 # Approach based on https://github.com/aquasecurity/trivy-action/issues/173#issuecomment-1497774518
104104 - name : Create SBOM
105105 if : " ${{ inputs.scan-ref == '' }}"
106- uses : aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29 .0
106+ uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
107107 with :
108108 image-ref : ' ${{ inputs.image-ref }}'
109109 scan-type : " ${{ inputs.image-ref != '' && 'image' || 'fs' }}"
@@ -133,7 +133,7 @@ runs:
133133
134134 # https://github.com/aquasecurity/trivy-action
135135 - name : Scan for critical vulnerabilities (create JUnit report)
136- uses : aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29 .0
136+ uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
137137 if : " ${{ inputs.junit-test-output != '' || inputs.create-test-report }}"
138138 with :
139139 scan-ref : " ${{ env.REPORT_SLUG }}-sbom.json"
@@ -148,7 +148,7 @@ runs:
148148 cache : ' false' # use our own cache handling
149149
150150 - name : Create vulnerability report as HTML
151- uses : aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29 .0
151+ uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
152152 env :
153153 # workaround for trivy action not setting env variables if they use the default value
154154 # we need to set the environment manually to the defaults to override previous settings
@@ -177,7 +177,7 @@ runs:
177177 cp ${GITHUB_ACTION_PATH}/summary.tpl ./trivy-summary.tpl
178178 - name : Create summary on vulnerabilities
179179 if : ${{ inputs.create-summary == 'true' }}
180- uses : aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29 .0
180+ uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
181181 env :
182182 # workaround for trivy action not setting env variables if they use the default value
183183 # we need to set the environment manually to the defaults to override previous settings
@@ -217,7 +217,7 @@ runs:
217217
218218 # https://github.com/marketplace/actions/junit-report-action
219219 - name : Publish Test Report
220- uses : mikepenz/action-junit-report@b14027d33d3a745ccc4d6a12f649e83110b5a373 # v5.4 .0
220+ uses : mikepenz/action-junit-report@97744eca465b8df9e6e33271cb155003f85327f1 # v5.5 .0
221221 if : ${{ always() && inputs.create-test-report == 'true' }} # always run even if the previous step fails
222222 with :
223223 report_paths : " ${{ inputs.junit-test-output != '' && inputs.junit-test-output || 'trivy.xml' }}*"
0 commit comments