diff --git a/.github/workflows/trivy-license.yml b/.github/workflows/trivy-license.yml index 4794f39..cdb8e41 100644 --- a/.github/workflows/trivy-license.yml +++ b/.github/workflows/trivy-license.yml @@ -48,7 +48,7 @@ jobs: persist-credentials: false - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0 + uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0 with: scan-type: fs format: sarif diff --git a/.github/workflows/trivy-vuln.yml b/.github/workflows/trivy-vuln.yml index b3c84df..49972fb 100644 --- a/.github/workflows/trivy-vuln.yml +++ b/.github/workflows/trivy-vuln.yml @@ -48,7 +48,7 @@ jobs: persist-credentials: false - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0 + uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0 with: scan-type: fs format: sarif