From e3346a03c26c5e9d528499f8aa3aa49309c68c43 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Feb 2022 14:26:12 +0000 Subject: [PATCH] chore(deps): bump aquasecurity/trivy-action from 0.2.1 to 0.2.2 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.2.1 to 0.2.2. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/8f4c7160b470bafe4299efdc1c8a1fb495f8325a...a7a829a4345428ddd92ca57b18257440f6a18c90) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 52078a6d..88ce1cb0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -154,7 +154,7 @@ jobs: - name: Run vulnerability scanner in repo mode if: github.actor != 'dependabot[bot]' - uses: aquasecurity/trivy-action@8f4c7160b470bafe4299efdc1c8a1fb495f8325a # 0.2.1 + uses: aquasecurity/trivy-action@a7a829a4345428ddd92ca57b18257440f6a18c90 # 0.2.1 with: scan-type: 'fs' ignore-unfixed: false @@ -165,7 +165,7 @@ jobs: - name: Run vulnerability scanner in repo mode if: github.actor == 'dependabot[bot]' - uses: aquasecurity/trivy-action@8f4c7160b470bafe4299efdc1c8a1fb495f8325a # 0.2.1 + uses: aquasecurity/trivy-action@a7a829a4345428ddd92ca57b18257440f6a18c90 # 0.2.1 with: scan-type: 'fs' ignore-unfixed: false