diff --git a/.github/workflows/production.yaml b/.github/workflows/production.yaml index 37633b1..90d4d3c 100644 --- a/.github/workflows/production.yaml +++ b/.github/workflows/production.yaml @@ -244,7 +244,7 @@ jobs: test "$pocketbase_size" -le 67108864 - name: Scan web image - uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: version: v0.74.0 image-ref: ${{ env.WEB_IMAGE }}@${{ steps.web.outputs.digest }} @@ -254,7 +254,7 @@ jobs: severity: HIGH,CRITICAL - name: Scan worker image - uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: version: v0.74.0 image-ref: ${{ env.WORKER_IMAGE }}@${{ steps.worker.outputs.digest }} @@ -264,7 +264,7 @@ jobs: severity: HIGH,CRITICAL - name: Scan PocketBase image - uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: version: v0.74.0 image-ref: ${{ env.POCKETBASE_IMAGE }}@${{ steps.pocketbase.outputs.digest }}