diff --git a/.github/workflows/build_images.yaml b/.github/workflows/build_images.yaml index 3bc58d64..bcbe9dd7 100644 --- a/.github/workflows/build_images.yaml +++ b/.github/workflows/build_images.yaml @@ -81,7 +81,7 @@ jobs: file: ${{ env.DOCKERFILE }} # Trivy requires an OCI type tar to run the scan - name: Run Github Trivy Image Action - uses: aquasecurity/trivy-action@0.11.2 + uses: aquasecurity/trivy-action@0.12.0 with: image-ref: ${{ matrix.image }} trivy-config: ${{ inputs.trivy-image-config }} diff --git a/.github/workflows/build_rocks.yaml b/.github/workflows/build_rocks.yaml index 2a1c97bb..6214ae9e 100644 --- a/.github/workflows/build_rocks.yaml +++ b/.github/workflows/build_rocks.yaml @@ -211,7 +211,7 @@ jobs: run: | skopeo --insecure-policy copy oci-archive:$(ls "${{ matrix.path }}"/*.rock) docker://$IMAGE_REF --dest-creds "${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}" - name: Run Github Trivy Image Action - uses: aquasecurity/trivy-action@0.11.2 + uses: aquasecurity/trivy-action@0.12.0 if: steps.rock-cache.outputs.cache-hit != 'true' || inputs.cache-action == 'save' with: image-ref: ${{ env.IMAGE_REF }} diff --git a/.github/workflows/integration_test_run.yaml b/.github/workflows/integration_test_run.yaml index a6ea9cc8..e82b5c4f 100644 --- a/.github/workflows/integration_test_run.yaml +++ b/.github/workflows/integration_test_run.yaml @@ -291,7 +291,7 @@ jobs: run: k6 run load_tests/load-test.js ${{ inputs.load-test-run-args }} - name: Run Github Trivy FS Action if: ${{ inputs.trivy-fs-enabled }} - uses: aquasecurity/trivy-action@0.11.2 + uses: aquasecurity/trivy-action@0.12.0 with: scan-type: "fs" scan-ref: ${{ inputs.trivy-fs-ref }}