From 30b9ae1bcc28268aadcda1c7e76f9b27b7ef1f28 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Nov 2023 11:09:16 -0800 Subject: [PATCH] build(deps): bump aquasecurity/trivy-action from 0.13.1 to 0.14.0 (#6404) --- .github/workflows/trivy-scan.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/trivy-scan.yaml b/.github/workflows/trivy-scan.yaml index aa6c279da..8dd7dfc85 100644 --- a/.github/workflows/trivy-scan.yaml +++ b/.github/workflows/trivy-scan.yaml @@ -20,7 +20,7 @@ jobs: - name: Checkout code uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@f78e9ecf42a1271402d4f484518b9313235990e1 # master + uses: aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0 # master with: image-ref: 'docker.io/coredns/coredns:${{ matrix.versions }}' severity: 'CRITICAL,HIGH'