mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
chore(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 (#10306)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b2933f565d...fd25fed697
)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
parent
d064ac2bbe
commit
2e1018e0e3
5 changed files with 7 additions and 7 deletions
2
.github/workflows/devcontainer-build.yaml
vendored
2
.github/workflows/devcontainer-build.yaml
vendored
|
@ -23,7 +23,7 @@ jobs:
|
|||
- name: Build devcontainer image
|
||||
run: docker build .devcontainer
|
||||
- name: Trivy Scan Image
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.21.0
|
||||
with:
|
||||
scan-type: 'fs'
|
||||
ignore-unfixed: true
|
||||
|
|
2
.github/workflows/images-build.yaml
vendored
2
.github/workflows/images-build.yaml
vendored
|
@ -31,7 +31,7 @@ jobs:
|
|||
- name: ko build
|
||||
run: VERSION=${{ github.ref_name }} make ko-build-all
|
||||
- name: Trivy Scan Image
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.21.0
|
||||
with:
|
||||
scan-type: 'fs'
|
||||
ignore-unfixed: true
|
||||
|
|
2
.github/workflows/images-publish.yaml
vendored
2
.github/workflows/images-publish.yaml
vendored
|
@ -40,7 +40,7 @@ jobs:
|
|||
uses: ./.github/actions/setup-build-env
|
||||
timeout-minutes: 30
|
||||
- name: Run Trivy vulnerability scanner in repo mode
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.21.0
|
||||
with:
|
||||
scan-type: 'fs'
|
||||
ignore-unfixed: true
|
||||
|
|
2
.github/workflows/release.yaml
vendored
2
.github/workflows/release.yaml
vendored
|
@ -35,7 +35,7 @@ jobs:
|
|||
uses: ./.github/actions/setup-build-env
|
||||
timeout-minutes: 30
|
||||
- name: Run Trivy vulnerability scanner in repo mode
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.21.0
|
||||
with:
|
||||
scan-type: 'fs'
|
||||
ignore-unfixed: true
|
||||
|
|
|
@ -30,7 +30,7 @@ jobs:
|
|||
echo "releasebranch2=$releasebranch2" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Scan for vulnerabilities in latest image
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.8.0 (Trivy v0.34.0)
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.8.0 (Trivy v0.34.0)
|
||||
|
||||
with:
|
||||
image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
|
||||
|
@ -40,7 +40,7 @@ jobs:
|
|||
output: scan1.json
|
||||
|
||||
- name: Scan for vulnerabilities in latest-1 image
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.8.0 (Trivy v0.34.0)
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.8.0 (Trivy v0.34.0)
|
||||
with:
|
||||
image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.get-branches.outputs.releasebranch1 }}
|
||||
format: json
|
||||
|
@ -49,7 +49,7 @@ jobs:
|
|||
output: scan2.json
|
||||
|
||||
- name: Scan for vulnerabilities in latest-2 image
|
||||
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.8.0 (Trivy v0.34.0)
|
||||
uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # v0.8.0 (Trivy v0.34.0)
|
||||
with:
|
||||
image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.get-branches.outputs.releasebranch2 }}
|
||||
format: json
|
||||
|
|
Loading…
Reference in a new issue