Merge pull request #11 from alaub81/dependabot/github_actions/gh-actions-d884b4a175

Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the gh-actions group

Author: alaub81

.github/workflows/ci.yml

@@ -104,7 +104,7 @@ jobs:
 
       # Trivy Image Scan (SARIF)
       - name: Trivy scan
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: image
           image-ref: ${{ fromJSON(steps.meta.outputs.json).tags[0] }}
@@ -157,7 +157,7 @@ jobs:
 
       # Trivy scannt das lokale Image (kein GHCR-Pull nötig)
       - name: Trivy scan (local image)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: image
           image-ref: ${{ env.LOCAL_TAG }}

.github/workflows/release.yml

@@ -146,7 +146,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Trivy FS (SARIF)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         continue-on-error: true
         with:
           scan-type: fs
@@ -164,7 +164,7 @@ jobs:
           category: trivy-fs-rebuild
 
       - name: Trivy Image (gate)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: scan:${{ github.sha }}
           format: table
@@ -250,7 +250,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Trivy Image (SARIF)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: scan:${{ github.sha }}
           format: sarif
@@ -259,7 +259,7 @@ jobs:
           hide-progress: true
 
       - name: Trivy Image (enforce severity)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: scan:${{ github.sha }}
           # severity: CRITICAL,HIGH