Просмотр исходного кода

Update Trivy scanner to v0.69.1

Pin the latest Trivy scanner version for improved vulnerability detection.
maziggy 7 месяцев назад
Родитель
Сommit
fc4f565eba
1 измененных файлов с 2 добавлено и 0 удалено
  1. 2 0
      .github/workflows/security.yml

+ 2 - 0
.github/workflows/security.yml

@@ -79,6 +79,7 @@ jobs:
           format: 'sarif'
           format: 'sarif'
           output: 'trivy-results.sarif'
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH,MEDIUM'
           severity: 'CRITICAL,HIGH,MEDIUM'
+          trivy-version: 'v0.69.1'
 
 
       - name: Upload Trivy results to GitHub Security
       - name: Upload Trivy results to GitHub Security
         uses: github/codeql-action/upload-sarif@v4
         uses: github/codeql-action/upload-sarif@v4
@@ -95,6 +96,7 @@ jobs:
           format: 'sarif'
           format: 'sarif'
           output: 'trivy-config-results.sarif'
           output: 'trivy-config-results.sarif'
           severity: 'CRITICAL,HIGH,MEDIUM'
           severity: 'CRITICAL,HIGH,MEDIUM'
+          trivy-version: 'v0.69.1'
 
 
       - name: Upload Trivy config results
       - name: Upload Trivy config results
         uses: github/codeql-action/upload-sarif@v4
         uses: github/codeql-action/upload-sarif@v4