diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 8f72322..635a494 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -12,12 +12,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v4 with: ref: ${{ github.ref }} - name: Run Trivy fs vulnerability scanner - uses: anandg112/trivy-action@feat/add-skip-dirs-option + uses: aquasecurity/trivy-action@0.20.0 with: scan-type: 'fs' ignore-unfixed: true @@ -27,6 +27,6 @@ jobs: #severity: 'CRITICAL' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: 'trivy-results.sarif'