diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7bb7f01..2418fdf 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -68,7 +68,7 @@ jobs: uses: actions/checkout@v6 - name: Run Trivy on filesystem - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: scan-type: fs scan-ref: . @@ -96,7 +96,7 @@ jobs: run: docker build -f docker/Dockerfile.backend -t krabbx-backend:ci . - name: Run Trivy on backend image - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: image-ref: krabbx-backend:ci format: sarif @@ -123,7 +123,7 @@ jobs: run: docker build -f docker/Dockerfile.frontend -t krabbx-frontend:ci . - name: Run Trivy on frontend image - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: image-ref: krabbx-frontend:ci format: sarif