Upgrade Trivy action

Doc-only: true Required-githooks: true Signed-off-by: Tomasz Gromadzki <[email protected]>
daos-stack · Oct 25, 2024 · 17651f1 · 17651f1
1 parent fde8fc8
commit 17651f1
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -12,6 +12,10 @@ on:
   pull_request:
     branches: ["master", "release/**"]
 
+env:
+  # 0.28.0
+  TRIVY_ACTION: "aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2"
+
 # Declare default permissions as nothing.
 permissions: {}
 
@@ -26,7 +30,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11  # v4.1.1
 
       - name: Run Trivy vulnerability scanner in filesystem mode (table format)
-        uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8  # 0.24.0
+        uses: $TRIVY_ACTION
         with:
           scan-type: 'fs'
           scan-ref: '.'