From ca97ecb8497c09e90c288e694fe49382e49d033d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 2 Feb 2023 18:01:25 +0000 Subject: [PATCH] Bump aquasecurity/trivy-action from 0.2.1 to 0.9.0 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.2.1 to 0.9.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.2.1...0.9.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/pull-request.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml index 35285c8..4e00e0c 100644 --- a/.github/workflows/pull-request.yaml +++ b/.github/workflows/pull-request.yaml @@ -36,7 +36,7 @@ jobs: sudo ./release/http-downloader_linux_amd64_v1/hd install jenkins-zh/jenkins-cli/jcli jcli version - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.2.1 + uses: aquasecurity/trivy-action@0.9.0 if: github.event_name == 'pull_request' with: scan-type: 'fs'