diff --git a/.github/workflows/action-image-build.yaml b/.github/workflows/action-image-build.yaml index 806327cbcf..0ff5cee3cd 100644 --- a/.github/workflows/action-image-build.yaml +++ b/.github/workflows/action-image-build.yaml @@ -245,7 +245,7 @@ jobs: - name: Scan container image for CVEs id: trivy_scan continue-on-error: true - uses: aquasecurity/trivy-action@v0.24.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: ghcr.io/${{ github.repository_owner }}/${{ steps.vars.outputs.chan_tag_testing }} format: sarif diff --git a/.github/workflows/security-ghcr-scan.yaml b/.github/workflows/security-ghcr-scan.yaml index 4bb697b209..1973c942a1 100644 --- a/.github/workflows/security-ghcr-scan.yaml +++ b/.github/workflows/security-ghcr-scan.yaml @@ -101,7 +101,7 @@ jobs: - name: Run Trivy image scan id: trivy - uses: aquasecurity/trivy-action@v0.24.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: ${{ matrix.image.imageRef }} format: sarif