Merge pull request #635 from eclipse-tractusx/dependabot/github_actio…

…ns/aquasecurity/trivy-action-0.28.0 chore(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0
eclipse-tractusx · Oct 16, 2024 · 4239d3b · 4239d3b
2 parents a9f4cbc + f7635c1
commit 4239d3b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@5681af892cd0f4997658e2bacc62bd0a894cf564 # v0.27.0
+        uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
         with:
           image-ref: "tractusx/app-puris-frontend:latest"
           format: "sarif"
@@ -67,7 +67,7 @@ jobs:
     steps:
       # Pull image from Docker Hub and run Trivy vulnerability scanner
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@5681af892cd0f4997658e2bacc62bd0a894cf564 # v0.27.0
+        uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
         with:
           image-ref: "tractusx/app-puris-backend:latest"
           format: "sarif"