@@ -189,7 +189,7 @@ runs:
189189 # Approach based on https://github.com/aquasecurity/trivy-action/issues/173#issuecomment-1497774518
190190 - name : Create SBOM
191191 if : " ${{ inputs.scan-ref == '' }}"
192- uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
192+ uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
193193 with :
194194 image-ref : " ${{ inputs.image-ref }}"
195195 scan-type : " ${{ inputs.image-ref != '' && 'image' || 'fs' }}"
@@ -222,7 +222,7 @@ runs:
222222
223223 # https://github.com/aquasecurity/trivy-action
224224 - name : Scan for critical vulnerabilities (create JUnit report)
225- uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
225+ uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
226226 if : " ${{ inputs.junit-test-output != '' || inputs.create-test-report }}"
227227 with :
228228 scan-ref : " ${{ env.REPORT_SLUG }}-sbom.json"
@@ -240,7 +240,7 @@ runs:
240240 skip-setup-trivy : true
241241
242242 - name : Create vulnerability report as HTML
243- uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
243+ uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
244244 env :
245245 # workaround for trivy action not setting env variables if they use the default value
246246 # we need to set the environment manually to the defaults to override previous settings
@@ -272,7 +272,7 @@ runs:
272272 cp ${GITHUB_ACTION_PATH}/summary.tpl ./trivy-summary.tpl
273273 - name : Create summary on vulnerabilities
274274 if : ${{ inputs.create-summary == 'true' }}
275- uses : aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # 0.34.2
275+ uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
276276 env :
277277 # workaround for trivy action not setting env variables if they use the default value
278278 # we need to set the environment manually to the defaults to override previous settings
0 commit comments