Merge pull request #23 from getnora-io/dependabot/github_actions/aquasecurity/trivy-action-0.35.0

chore(deps): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0
This commit is contained in:
2026-03-12 22:13:49 +03:00
committed by GitHub
2 changed files with 2 additions and 2 deletions

View File

@@ -72,7 +72,7 @@ jobs:
# ── CVE scan of source tree and Cargo.lock ────────────────────────────── # ── CVE scan of source tree and Cargo.lock ──────────────────────────────
- name: Trivy — filesystem scan (Cargo.lock + source) - name: Trivy — filesystem scan (Cargo.lock + source)
if: always() if: always()
uses: aquasecurity/trivy-action@0.34.2 uses: aquasecurity/trivy-action@0.35.0
with: with:
scan-type: fs scan-type: fs
scan-ref: . scan-ref: .

View File

@@ -153,7 +153,7 @@ jobs:
run: echo "tag=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT run: echo "tag=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
- name: Trivy — image scan (${{ matrix.name }}) - name: Trivy — image scan (${{ matrix.name }})
uses: aquasecurity/trivy-action@0.34.2 uses: aquasecurity/trivy-action@0.35.0
with: with:
scan-type: image scan-type: image
image-ref: ${{ env.NORA }}/${{ env.IMAGE_NAME }}:${{ steps.ver.outputs.tag }}${{ matrix.suffix }} image-ref: ${{ env.NORA }}/${{ env.IMAGE_NAME }}:${{ steps.ver.outputs.tag }}${{ matrix.suffix }}