diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 28a91672d..ab5439895 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -41,7 +41,7 @@ jobs: tags: pyatlan-trivy:latest - name: Trivy image scan (table) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: image-ref: pyatlan-trivy:latest scanners: 'vuln' @@ -67,7 +67,7 @@ jobs: fi - name: Trivy image scan (SARIF) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: image-ref: pyatlan-trivy:latest scanners: 'vuln' @@ -82,7 +82,7 @@ jobs: TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 - name: Trivy dependency scan (uv.lock, table) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: scan-type: fs scan-ref: uv.lock @@ -108,7 +108,7 @@ jobs: fi - name: Trivy dependency scan (uv.lock, SARIF) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: scan-type: fs scan-ref: uv.lock @@ -163,7 +163,7 @@ jobs: } >> "$GITHUB_STEP_SUMMARY" - name: Fail on High/Critical vulnerabilities (image) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: image-ref: pyatlan-trivy:latest scanners: 'vuln' @@ -177,7 +177,7 @@ jobs: TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 - name: Fail on High/Critical vulnerabilities (uv.lock) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: scan-type: fs scan-ref: uv.lock