diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index fad9a8d..2558afc 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@v3 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.12.0 + uses: aquasecurity/trivy-action@0.19.0 if: ${{ ! github.event.schedule }} # Do not run inline checks when running periodically with: scan-type: fs @@ -31,7 +31,7 @@ jobs: skip-files: 'tests/integration/tls_cert/redis.key' - name: Run Trivy vulnerability scanner sarif output - uses: aquasecurity/trivy-action@0.12.0 + uses: aquasecurity/trivy-action@0.19.0 if: ${{ github.event.schedule }} # Generate sarif when running periodically with: scan-type: fs