diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml index f9a8cba..7b35c5f 100644 --- a/.github/workflows/dependency-scan.yml +++ b/.github/workflows/dependency-scan.yml @@ -107,7 +107,7 @@ jobs: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master + uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master with: scan-type: 'fs' scan-ref: '.' diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 665a642..76f5df3 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -72,7 +72,7 @@ jobs: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master + uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master with: image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest format: 'sarif' diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8a01e3d..e9bf160 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -413,7 +413,7 @@ jobs: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master + uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master with: scan-type: "fs" scan-ref: "." @@ -456,7 +456,7 @@ jobs: run: docker build -t predictiq-api:${{ github.sha }} -f Dockerfile . - name: Scan API container with Trivy - uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master + uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master with: image-ref: "predictiq-api:${{ github.sha }}" format: "sarif" @@ -476,7 +476,7 @@ jobs: continue-on-error: true - name: Scan TTS container with Trivy - uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master + uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master if: success() with: image-ref: "predictiq-tts:${{ github.sha }}"