File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -23,12 +23,13 @@ jobs:
2323 security-events : write
2424 steps :
2525 - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
26- - uses : aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29 .0
26+ - uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35 .0
2727 with :
2828 scan-type : ' fs'
2929 ignore-unfixed : true
3030 format : ' sarif'
3131 output : ' trivy-results.sarif'
32+ trivy-version : ' 0.69.3'
3233 - run : |
3334 jq '.runs[].tool.driver.name = "trivy-fs"' < trivy-results.sarif > tmp
3435 mv tmp trivy-results.sarif
Original file line number Diff line number Diff line change 8383 '79b0f844237bd4b0446e4dc884dbc1765fc7dedc3968f743d5949c6f2e701739'
8484
8585default [ 'trivy' ] [ 'download_path' ] =
86- 'https://github.com/aquasecurity/trivy/releases/download/v0.64.1 /trivy_0.64.1_Linux -64bit.tar.gz'
86+ 'https://github.com/aquasecurity/trivy/releases/download/v0.69.3 /trivy_0.69.3_Linux -64bit.tar.gz'
8787default [ 'trivy' ] [ 'sha256' ] =
88- '1a09d86667b3885a8783d1877c9abc8061b2b4e9b403941b22cbd82f10d275a8 '
88+ '1816b632dfe529869c740c0913e36bd1629cb7688bd5634f4a858c1d57c88b75 '
8989
9090default [ 'yq' ] [ 'download_path' ] =
9191 'https://github.com/mikefarah/yq/releases/download/v4.30.8/yq_linux_amd64'
Original file line number Diff line number Diff line change 8484 'dece9b0131af5ced0f8c278a53c0cf06a4f0d1d70a177c0979f6d111654397ce'
8585
8686default [ 'trivy' ] [ 'download_path' ] =
87- 'https://github.com/aquasecurity/trivy/releases/download/v0.64.1 /trivy_0.64.1_macOS -64bit.tar.gz'
87+ 'https://github.com/aquasecurity/trivy/releases/download/v0.69.3 /trivy_0.69.3_macOS -64bit.tar.gz'
8888default [ 'trivy' ] [ 'sha256' ] =
89- '107a874b41c1f0a48849f859b756f500d8be06f2d2b8956a046a97ae38088bf6 '
89+ 'fec4a9f7569b624dd9d044fca019e5da69e032700edbb1d7318972c448ec2f4e '
9090
9191default [ 'yq' ] [ 'download_path' ] =
9292 'https://github.com/mikefarah/yq/releases/download/v4.30.8/yq_darwin_amd64'
You can’t perform that action at this time.
0 commit comments