github: Use cohort="+" for trivy snap scan

So that we get the latest version when rolling out new releases. Signed-off-by: Thomas Parrott <[email protected]>
canonical · Dec 10, 2024 · 2d50396 · 2d50396
1 parent 22cbc6f
commit 2d50396
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -95,7 +95,7 @@ jobs:
 
       - name: Download snap for scan
         run: |
-          snap download lxd --channel=${{ matrix.version }}/stable
+          snap download lxd --channel=${{ matrix.version }}/stable --cohort="+"
           unsquashfs ./lxd*.snap
 
       - name: Run Trivy vulnerability scanner