From 5f871c1699a2d8b92dfc6ab1c506ba6ec77ef235 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 3 Jan 2024 15:12:41 +0000 Subject: [PATCH] Bump aquasecurity/trivy-action in /.github/workflows Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.16.0 to 0.16.1. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.16.0...0.16.1) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/consul-template.yml | 2 +- .github/workflows/docker-nginx-proxy.yml | 2 +- .github/workflows/golang-terratest.yml | 2 +- .github/workflows/tool-box.yml | 2 +- .github/workflows/vault.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/consul-template.yml b/.github/workflows/consul-template.yml index 8ce5ef408..744258519 100644 --- a/.github/workflows/consul-template.yml +++ b/.github/workflows/consul-template.yml @@ -42,7 +42,7 @@ jobs: run: make tag - name: Run trivy scan - uses: aquasecurity/trivy-action@0.16.0 + uses: aquasecurity/trivy-action@0.16.1 with: image-ref: 'constantin07/consul-template:latest' format: 'sarif' diff --git a/.github/workflows/docker-nginx-proxy.yml b/.github/workflows/docker-nginx-proxy.yml index a3508ac54..b3aafd322 100644 --- a/.github/workflows/docker-nginx-proxy.yml +++ b/.github/workflows/docker-nginx-proxy.yml @@ -41,7 +41,7 @@ jobs: run: make tag - name: Run trivy scan - uses: aquasecurity/trivy-action@0.16.0 + uses: aquasecurity/trivy-action@0.16.1 with: image-ref: 'docker.io/constantin07/docker-nginx-proxy:latest' security-checks: 'vuln,secret,config' diff --git a/.github/workflows/golang-terratest.yml b/.github/workflows/golang-terratest.yml index db4771f6d..36470a1aa 100644 --- a/.github/workflows/golang-terratest.yml +++ b/.github/workflows/golang-terratest.yml @@ -39,7 +39,7 @@ jobs: run: make build - name: Run trivy scan - uses: aquasecurity/trivy-action@0.16.0 + uses: aquasecurity/trivy-action@0.16.1 with: image-ref: 'constantin07/golang-terratest:1.0.0' format: 'sarif' diff --git a/.github/workflows/tool-box.yml b/.github/workflows/tool-box.yml index 880d77246..0ff98def6 100644 --- a/.github/workflows/tool-box.yml +++ b/.github/workflows/tool-box.yml @@ -68,7 +68,7 @@ jobs: run: docker buildx build --load --platform 'linux/arm64' -t ${{ env.IMAGE_NAME }}-arm64 . - name: Run trivy scan - uses: aquasecurity/trivy-action@0.16.0 + uses: aquasecurity/trivy-action@0.16.1 with: image-ref: ${{ env.IMAGE_NAME }} format: 'sarif' diff --git a/.github/workflows/vault.yml b/.github/workflows/vault.yml index faae86925..f85c09b8b 100644 --- a/.github/workflows/vault.yml +++ b/.github/workflows/vault.yml @@ -85,7 +85,7 @@ jobs: -t ${{ env.REPOSITORY }}:${{ env.VAULT_VERSION }}-arm64 . - name: Run trivy scan - uses: aquasecurity/trivy-action@0.16.0 + uses: aquasecurity/trivy-action@0.16.1 with: image-ref: ${{ env.REPOSITORY }}:${{ env.VAULT_VERSION }} format: 'sarif'