From cf695e9ac1cf95cd59f89bbd935b87ba29f71251 Mon Sep 17 00:00:00 2001 From: Enrico Risa Date: Thu, 7 Dec 2023 16:06:20 +0100 Subject: [PATCH] fix: downgrade trivy version --- .github/workflows/trivy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 5d0857579..d86c396cb 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -57,7 +57,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.14.0 + uses: aquasecurity/trivy-action@0.12.0 with: scan-type: "config" # ignore-unfixed: true @@ -101,7 +101,7 @@ jobs: ## the next two steps will only execute if the image exists check was successful - name: Run Trivy vulnerability scanner if: success() && steps.imageCheck.outcome != 'failure' - uses: aquasecurity/trivy-action@0.14.0 + uses: aquasecurity/trivy-action@0.12.0 with: image-ref: "tractusx/${{ matrix.image }}:sha-${{ needs.git-sha7.outputs.value }}" format: "sarif"