diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8b548de..510ad8f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ jobs: path: ./ extra_args: --only-verified - name: Scan project dependencies and lockfiles (high/critical) - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@v0.30.0 with: scan-type: fs scan-ref: . @@ -66,7 +66,7 @@ jobs: - name: Build production image run: docker build --pull --tag vacatureradar:ci . - name: Scan container image for high/critical vulnerabilities - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@v0.30.0 with: image-ref: vacatureradar:ci format: table @@ -74,7 +74,7 @@ jobs: exit-code: "1" ignore-unfixed: true - name: Generate CycloneDX software bill of materials - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@v0.30.0 with: image-ref: vacatureradar:ci format: cyclonedx