Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 #171
dependabot[bot]Annotations
1 error and 4 warnings
|
Trivy-Scan
Resource not accessible by integration
|
|
Trivy-Scan
The following actions use a deprecated Node.js version and will be forced to run on node20: jaxxstorm/action-install-gh-release@v1.10.0. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Trivy-Scan
Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. See https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#scanning-on-push for more information on how to configure these events.
|
|
Trivy-Scan
Resource not accessible by integration
|
|
Trivy-Scan
Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. See https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#scanning-on-push for more information on how to configure these events.
|