diff --git a/.gitea/workflows/run-trivy-scan.yaml b/.gitea/workflows/run-trivy-scan.yaml index d6486b1..4d9c1fa 100644 --- a/.gitea/workflows/run-trivy-scan.yaml +++ b/.gitea/workflows/run-trivy-scan.yaml @@ -37,8 +37,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.4.4 - - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.4.4 + - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 + - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 - run: | trivy config --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output config-sarif.json . env: @@ -53,11 +53,11 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.4.4 - - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.4.4 + - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 + - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 - name: Get images from files id: get-images - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@1.4.4 + uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 with: files: ${{ inputs.image-scan-files }} - name: Pull images @@ -97,7 +97,7 @@ jobs: TRIVY_CACHE_DIR: ${{ runner.temp }}/trivy - name: Merge image SARIF files if: steps.get-images.outputs.images != '[]' && steps.scan.outputs.count != '0' - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@1.4.4 + uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 with: files: ${{ steps.scan.outputs.files }} output-file: image-sarif.json @@ -150,7 +150,7 @@ jobs: echo "EOF" >> "$GITHUB_OUTPUT" - name: Merge SARIF files id: merge-step - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@1.4.4 + uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5 with: files: ${{ steps.file-list.outputs.files }} output-file: merged-sarif.json