Compare commits

..

1 Commits

Author SHA1 Message Date
Aqua Security automated builds
dc5a429b52 chore(deps): Update trivy to v0.64.1 (#474)
Co-authored-by: nikpivkin <nikpivkin@users.noreply.github.com>
2025-07-04 00:18:35 -06:00
3 changed files with 4 additions and 4 deletions
+1 -1
View File
@@ -6,7 +6,7 @@ on:
workflow_dispatch:
env:
TRIVY_VERSION: 0.63.0
TRIVY_VERSION: 0.64.1
BATS_LIB_PATH: '/usr/lib/'
jobs:
+2 -2
View File
@@ -215,7 +215,7 @@ jobs:
uses: aquasecurity/setup-trivy@v0.2.0
with:
cache: true
version: v0.63.0
version: v0.64.1
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@master
@@ -847,7 +847,7 @@ Following inputs can be used as `step.with` keys:
| `github-pat` | String | | Authentication token to enable sending SBOM scan results to GitHub Dependency Graph. Can be either a GitHub Personal Access Token (PAT) or GITHUB_TOKEN |
| `limit-severities-for-sarif` | Boolean | false | By default *SARIF* format enforces output of all vulnerabilities regardless of configured severities. To override this behavior set this parameter to **true** |
| `docker-host` | String | | By default it is set to `unix://var/run/docker.sock`, but can be updated to help with containerized infrastructure values (`unix:/` or other prefix is required) |
| `version` | String | `v0.63.0` | Trivy version to use, e.g. `latest` or `v0.63.0` |
| `version` | String | `v0.64.1` | Trivy version to use, e.g. `latest` or `v0.64.1` |
| `skip-setup-trivy` | Boolean | false | Skip calling the `setup-trivy` action to install `trivy` |
| `token-setup-trivy` | Boolean | | Overwrite `github.token` used by `setup-trivy` to checkout the `trivy` repository |
+1 -1
View File
@@ -98,7 +98,7 @@ inputs:
version:
description: 'Trivy version to use'
required: false
default: 'v0.63.0'
default: 'v0.64.1'
cache:
description: 'Used to specify whether caching is needed. Set to false, if you would like to disable caching.'
required: false