diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml index bc912fe32..02b7d6e9f 100644 --- a/.github/workflows/trivy.yaml +++ b/.github/workflows/trivy.yaml @@ -40,7 +40,7 @@ jobs: persist-credentials: false - name: Trivy Vulnerability Scan - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.36.0 with: scan-type: "fs" severity: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL" @@ -51,7 +51,7 @@ jobs: exit-code: 1 - name: Trivy License Scan - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.36.0 with: scan-type: "fs" severity: "HIGH,CRITICAL"