chore(deps): update actions/cache digest to 27d5ce7

Revert "refactor(setup-db): to run trivy in docker (#54 )" (#56 )
This reverts commit 81eda53a59. Reviewed-on: #56 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-04-16 10:17:30 +00:00 · 2026-04-10 19:36:38 +02:00 · 2026-04-10 18:43:03 +02:00
2 changed files with 2 additions and 2 deletions
@@ -24,7 +24,7 @@ runs:
      run: |
        echo "current-date=$(date +%Y-%m-%d)" >> $GITHUB_OUTPUT
    - id: restore-db
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
      with:
        path: ${{ inputs.cache-dir }}
        key: trivy-db-${{ steps.current-date.outputs.current-date }}
@@ -40,7 +40,7 @@ runs:
        echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
    - name: Cache Trivy binary
      id: cache-trivy
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
      with:
        path: /usr/local/bin/trivy
        key: trivy-${{ steps.version.outputs.version }}-${{ steps.arch.outputs.arch }}
Author	SHA1	Message	Date
renovate-bot	5c7c84b972	chore(deps): update actions/cache digest to 27d5ce7 renovate/stability-days Updates have not met minimum release age requirement Details CI / Test Setup Trivy amd64 (pull_request) Successful in 9s Details CI / Test Get Images From Files (pull_request) Successful in 6s Details CI / Test Merge SARIF Files (pull_request) Successful in 5s Details CI / Test Setup Trivy arm64 (pull_request) Successful in 3m15s Details CI / Test Setup DB (pull_request) Successful in 4m38s Details	2026-04-16 10:17:30 +00:00
t.behrendt	2616391b42	Revert "refactor(setup-db): to run trivy in docker (#54 )" (#56 ) CD / Release (push) Successful in 5s Details This reverts commit `81eda53a59`. Reviewed-on: #56 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-04-10 19:36:38 +02:00
t.behrendt	81eda53a59	refactor(setup-db): to run trivy in docker (#54 ) CD / Release (push) Successful in 4s Details As part of our safety initiative, I'm refactoring setup-db to run trivy inside a Docker container with minimal privileges, reducing leakage of secrets, files, etc. to a minimum in case the dependency gets compromised. Additionally, we are always pinning the trivy docker image to a fixed digest. Renovate has been configured to keep the Trivy image version up-to-date. Reviewed-on: #54 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-04-10 18:43:03 +02:00