fix(ci): pin Trivy action to real tag v0.36.0

gl0bal01 · gl0bal01 · commit 2d65bbcd2dd0 · 2026-05-18T07:54:52.000Z
Previous c17f07b used aquasecurity/trivy-action@0.24.0 which does not exist as a tag. CI failed in Set up job with "Unable to resolve action".
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -113,7 +113,7 @@ jobs:
           '
 
       - name: Trivy vulnerability scan
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: smoke-test:local
           format: table

Original file line number	Diff line number	Diff line change
`@@ -113,7 +113,7 @@ jobs:`
`113`	`113`	`'`
`114`	`114`
`115`	`115`	`- name: Trivy vulnerability scan`
`116`		`- uses: aquasecurity/trivy-action@0.24.0`
	`116`	`+ uses: aquasecurity/trivy-action@v0.36.0`
`117`	`117`	`with:`
`118`	`118`	`image-ref: smoke-test:local`
`119`	`119`	`format: table`