From 7c9e10d1c4de386dc2725553d1a6c94c3db86ae5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 27 Feb 2026 08:18:05 +0000 Subject: [PATCH] build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.1 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.1. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.1) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/docker.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index e48e37a..16be0aa 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -35,7 +35,7 @@ jobs: # Scheduled scan: scan existing published image - name: Run Trivy vulnerability scanner on published image - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.1 if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' with: image-ref: ghcr.io/${{ env.REPO }}:latest @@ -50,7 +50,7 @@ jobs: sarif_file: "trivy-docker-results.sarif" - name: Run Trivy vulnerability scanner (table output for scheduled) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.1 if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' with: image-ref: ghcr.io/${{ env.REPO }}:latest @@ -115,7 +115,7 @@ jobs: cache-to: type=gha,mode=max - name: Run Trivy vulnerability scanner on Docker image - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.1 if: github.event_name != 'schedule' && github.event_name != 'workflow_dispatch' with: image-ref: ${{ env.REPO }}:scan @@ -130,7 +130,7 @@ jobs: sarif_file: "trivy-docker-results.sarif" - name: Run Trivy vulnerability scanner (table output) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.1 if: github.event_name != 'schedule' && github.event_name != 'workflow_dispatch' with: image-ref: ${{ env.REPO }}:scan