@@ -152,7 +152,7 @@ runs:
152152 uses : aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.5
153153 with :
154154 # renovate: datasource=github-releases depName=aquasecurity/trivy
155- version : v0.69.1
155+ version : v0.69.3
156156 cache : true
157157
158158 - name : Restore trivy cache
@@ -168,7 +168,7 @@ runs:
168168 # Approach based on https://github.com/aquasecurity/trivy-action/issues/173#issuecomment-1497774518
169169 - name : Create SBOM
170170 if : " ${{ inputs.scan-ref == '' }}"
171- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
171+ uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
172172 with :
173173 image-ref : " ${{ inputs.image-ref }}"
174174 scan-type : " ${{ inputs.image-ref != '' && 'image' || 'fs' }}"
@@ -201,7 +201,7 @@ runs:
201201
202202 # https://github.com/aquasecurity/trivy-action
203203 - name : Scan for critical vulnerabilities (create JUnit report)
204- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
204+ uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
205205 if : " ${{ inputs.junit-test-output != '' || inputs.create-test-report }}"
206206 with :
207207 scan-ref : " ${{ env.REPORT_SLUG }}-sbom.json"
@@ -219,7 +219,7 @@ runs:
219219 skip-setup-trivy : true
220220
221221 - name : Create vulnerability report as HTML
222- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
222+ uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
223223 env :
224224 # workaround for trivy action not setting env variables if they use the default value
225225 # we need to set the environment manually to the defaults to override previous settings
@@ -251,7 +251,7 @@ runs:
251251 cp ${GITHUB_ACTION_PATH}/summary.tpl ./trivy-summary.tpl
252252 - name : Create summary on vulnerabilities
253253 if : ${{ inputs.create-summary == 'true' }}
254- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
254+ uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
255255 env :
256256 # workaround for trivy action not setting env variables if they use the default value
257257 # we need to set the environment manually to the defaults to override previous settings
@@ -294,7 +294,7 @@ runs:
294294
295295 # https://github.com/marketplace/actions/junit-report-action
296296 - name : Publish Test Report
297- uses : mikepenz/action-junit-report@74626db7353a25a20a72816467ebf035f674c5f8 # v6.2.0
297+ uses : mikepenz/action-junit-report@49b2ca06f62aa7ef83ae6769a2179271e160d8e4 # v6.3.1
298298 if : ${{ always() && inputs.create-test-report == 'true' }} # always run even if the previous step fails
299299 with :
300300 report_paths : " ${{ inputs.junit-test-output != '' && inputs.junit-test-output || 'trivy.xml' }}*"
0 commit comments