From f96f79aa227a680b262f913e871892d9f41a9c3d Mon Sep 17 00:00:00 2001
From: Daniel Chabr <danielchabr@gmail.com>
Date: Mon, 5 Jun 2023 19:08:24 +0200
Subject: [PATCH] bump trivy to v0.42.0 (#237)

* chore(deps): update trivy to v0.42.0

* revert formatting

* revert formatting again

* update sarif version in tests
---
 .github/workflows/build.yaml | 2 +-
 Dockerfile                   | 2 +-
 test/data/config-sarif.test  | 4 ++--
 test/data/image-sarif.test   | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 20913a5..3708e6e 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,7 +1,7 @@
 name: "build"
 on: [push, pull_request]
 env:
-  TRIVY_VERSION: 0.40.0
+  TRIVY_VERSION: 0.42.0
   BATS_LIB_PATH: '/usr/lib/'
 jobs:
   build:
diff --git a/Dockerfile b/Dockerfile
index 133bce2..9ec745d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/aquasecurity/trivy:0.40.0
+FROM ghcr.io/aquasecurity/trivy:0.42.0
 COPY entrypoint.sh /
 RUN apk --no-cache add bash curl npm
 RUN chmod +x /entrypoint.sh
diff --git a/test/data/config-sarif.test b/test/data/config-sarif.test
index 1b712c0..d671303 100644
--- a/test/data/config-sarif.test
+++ b/test/data/config-sarif.test
@@ -1,6 +1,6 @@
 {
   "version": "2.1.0",
-  "$schema": "https://json.schemastore.org/sarif-2.1.0-rtm.5.json",
+  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
   "runs": [
     {
       "tool": {
@@ -64,7 +64,7 @@
               }
             }
           ],
-          "version": "0.40.0"
+          "version": "0.42.0"
         }
       },
       "results": [
diff --git a/test/data/image-sarif.test b/test/data/image-sarif.test
index ce6591c..0ec5a28 100644
--- a/test/data/image-sarif.test
+++ b/test/data/image-sarif.test
@@ -1,6 +1,6 @@
 {
   "version": "2.1.0",
-  "$schema": "https://json.schemastore.org/sarif-2.1.0-rtm.5.json",
+  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
   "runs": [
     {
       "tool": {
@@ -37,7 +37,7 @@
               }
             }
           ],
-          "version": "0.40.0"
+          "version": "0.42.0"
         }
       },
       "results": [