From 0a8f050d9f35e9f2bafae3870288cee7df3819d5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Apr 2026 03:10:04 +0000 Subject: [PATCH] Bump aquasecurity/trivy-action in the gh-actions group Bumps the gh-actions group with 1 update: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.35.0...v0.36.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8c7cc89..4156186 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -104,7 +104,7 @@ jobs: # Trivy Image Scan (SARIF) - name: Trivy scan - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: scan-type: image image-ref: ${{ fromJSON(steps.meta.outputs.json).tags[0] }} @@ -157,7 +157,7 @@ jobs: # Trivy scannt das lokale Image (kein GHCR-Pull nötig) - name: Trivy scan (local image) - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: scan-type: image image-ref: ${{ env.LOCAL_TAG }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6ec3cad..c2eb3c9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -146,7 +146,7 @@ jobs: cache-to: type=gha,mode=max - name: Trivy FS (SARIF) - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 continue-on-error: true with: scan-type: fs @@ -164,7 +164,7 @@ jobs: category: trivy-fs-rebuild - name: Trivy Image (gate) - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: scan:${{ github.sha }} format: table @@ -250,7 +250,7 @@ jobs: cache-to: type=gha,mode=max - name: Trivy Image (SARIF) - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: scan:${{ github.sha }} format: sarif @@ -259,7 +259,7 @@ jobs: hide-progress: true - name: Trivy Image (enforce severity) - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: scan:${{ github.sha }} # severity: CRITICAL,HIGH