diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index ba893aa7b..01aea0df6 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -75,7 +75,7 @@ jobs: run: docker build -t bambuddy:security-scan . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.34.0 + uses: aquasecurity/trivy-action@v0.35.0 with: image-ref: 'bambuddy:security-scan' format: 'sarif' @@ -91,7 +91,7 @@ jobs: category: trivy - name: Run Trivy for Dockerfile/IaC - uses: aquasecurity/trivy-action@0.34.0 + uses: aquasecurity/trivy-action@v0.35.0 with: scan-type: 'config' scan-ref: '.'