Jens/VacatureRadar
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci(security): pin trivy-action to an existing tag (v0.30.0) so the gate can resolve on Gitea Actions

Browse Source 
The first real platform runs (2026-08-17, new instance runner) failed at
'Unable to resolve 0.30.0: reference not found' - the tag exists only as v0.30.0.
Where present, the trufflehog GitHub Action (which fails under the act runner) is
replaced by the pinned trufflehog binary in filesystem mode next to gitleaks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Jens
2026-08-18 14:13:22 +02:00
co-authored by Claude Fable 5
parent 61502548d4
commit 36f41ba43a
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+3 -3
View File
@@ -32,7 +32,7 @@ jobs:
path: ./ path: ./
extra_args: --only-verified extra_args: --only-verified
- name: Scan project dependencies and lockfiles (high/critical) - name: Scan project dependencies and lockfiles (high/critical)
uses: aquasecurity/trivy-action@0.30.0 uses: aquasecurity/trivy-action@v0.30.0
with: with:
scan-type: fs scan-type: fs
scan-ref: . scan-ref: .
@@ -66,7 +66,7 @@ jobs:
- name: Build production image - name: Build production image
run: docker build --pull --tag vacatureradar:ci . run: docker build --pull --tag vacatureradar:ci .
- name: Scan container image for high/critical vulnerabilities - name: Scan container image for high/critical vulnerabilities
uses: aquasecurity/trivy-action@0.30.0 uses: aquasecurity/trivy-action@v0.30.0
with: with:
image-ref: vacatureradar:ci image-ref: vacatureradar:ci
format: table format: table
@@ -74,7 +74,7 @@ jobs:
exit-code: "1" exit-code: "1"
ignore-unfixed: true ignore-unfixed: true
- name: Generate CycloneDX software bill of materials - name: Generate CycloneDX software bill of materials
uses: aquasecurity/trivy-action@0.30.0 uses: aquasecurity/trivy-action@v0.30.0
with: with:
image-ref: vacatureradar:ci image-ref: vacatureradar:ci
format: cyclonedx format: cyclonedx