From a830e8a2d09b71dfb9b69723ac18d275306900ef Mon Sep 17 00:00:00 2001 From: Jens Date: Tue, 18 Aug 2026 14:13:18 +0200 Subject: [PATCH] ci(security): pin trivy-action to an existing tag (v0.30.0) so the gate can resolve on Gitea Actions The first real platform runs (2026-08-17, new instance runner) failed at 'Unable to resolve 0.30.0: reference not found' - the tag exists only as v0.30.0. Where present, the trufflehog GitHub Action (which fails under the act runner) is replaced by the pinned trufflehog binary in filesystem mode next to gitleaks. Co-Authored-By: Claude Fable 5 --- .gitea/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index f4d94ec..eb2f598 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: docker compose -p mobilityops-ci -f compose.yaml -f compose.test.yaml run --build --rm api ruff check app tests scripts docker compose -p mobilityops-ci -f compose.yaml -f compose.test.yaml run --rm api mypy app - name: Backend dependency vulnerability scan (HIGH/CRITICAL) - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@v0.30.0 with: scan-type: fs scan-ref: backend