5050 - name : Build an image from Dockerfile
5151 run : docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
5252 - name : Run Trivy vulnerability scanner
53- uses : aquasecurity/trivy-action@0.35 .0
53+ uses : aquasecurity/trivy-action@v0.36 .0
5454 with :
5555 image-ref : ' docker.io/my-organization/my-app:${{ github.sha }}'
5656 format : ' table'
7878 uses : actions/checkout@v4
7979
8080 - name : Run Trivy vulnerability scanner in fs mode
81- uses : aquasecurity/trivy-action@0.35 .0
81+ uses : aquasecurity/trivy-action@v0.36 .0
8282 with :
8383 scan-type : ' fs'
8484 scan-ref : ' .'
@@ -119,7 +119,7 @@ If you want to disable caching, set the `cache` input to `false`, but we recomme
119119
120120` ` ` yaml
121121 - name: Run Trivy scanner without cache
122- uses: aquasecurity/trivy-action@0.35 .0
122+ uses: aquasecurity/trivy-action@v0.36 .0
123123 with:
124124 scan-type: 'fs'
125125 scan-ref: '.'
@@ -180,7 +180,7 @@ When running a scan, set the environment variables `TRIVY_SKIP_DB_UPDATE` and `T
180180
181181` ` ` yaml
182182 - name: Run Trivy scanner without downloading DBs
183- uses: aquasecurity/trivy-action@0.35 .0
183+ uses: aquasecurity/trivy-action@v0.36 .0
184184 with:
185185 scan-type: 'image'
186186 scan-ref: 'myimage'
@@ -287,7 +287,7 @@ Therefore, you can't install `Trivy` using the `setup-trivy` action.
287287To fix this problem, you need to overwrite the token for `setup-trivy` using `token-setup-trivy` input :
288288` ` ` yaml
289289 - name: Run Trivy scanner without cache
290- uses: aquasecurity/trivy-action@0.35 .0
290+ uses: aquasecurity/trivy-action@v0.36 .0
291291 with:
292292 scan-type: 'fs'
293293 scan-ref: '.'
@@ -318,7 +318,7 @@ jobs:
318318 docker save -o vuln-image.tar <your-docker-image>
319319
320320 - name: Run Trivy vulnerability scanner in tarball mode
321- uses: aquasecurity/trivy-action@0.35 .0
321+ uses: aquasecurity/trivy-action@v0.36 .0
322322 with:
323323 input: /github/workspace/vuln-image.tar
324324 severity: 'CRITICAL,HIGH'
@@ -345,7 +345,7 @@ jobs:
345345 uses: actions/checkout@v4
346346
347347 - name: Run Trivy vulnerability scanner
348- uses: aquasecurity/trivy-action@0.35 .0
348+ uses: aquasecurity/trivy-action@v0.36 .0
349349 with:
350350 scan-type: "fs"
351351 scan-ref: .
@@ -374,7 +374,7 @@ jobs:
374374 uses: actions/checkout@v4
375375
376376 - name: Run Trivy vulnerability scanner
377- uses: aquasecurity/trivy-action@0.35 .0
377+ uses: aquasecurity/trivy-action@v0.36 .0
378378 with:
379379 scan-type: "fs"
380380 scan-ref: .
@@ -407,7 +407,7 @@ jobs:
407407 docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
408408
409409 - name: Run Trivy vulnerability scanner
410- uses: aquasecurity/trivy-action@0.35 .0
410+ uses: aquasecurity/trivy-action@v0.36 .0
411411 with:
412412 image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
413413 format: 'sarif'
@@ -445,7 +445,7 @@ jobs:
445445 docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
446446
447447 - name: Run Trivy vulnerability scanner
448- uses: aquasecurity/trivy-action@0.35 .0
448+ uses: aquasecurity/trivy-action@v0.36 .0
449449 with:
450450 image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
451451 format: 'sarif'
@@ -483,7 +483,7 @@ jobs:
483483 uses: actions/checkout@v4
484484
485485 - name: Run Trivy vulnerability scanner in repo mode
486- uses: aquasecurity/trivy-action@0.35 .0
486+ uses: aquasecurity/trivy-action@v0.36 .0
487487 with:
488488 scan-type: 'fs'
489489 ignore-unfixed: true
@@ -520,7 +520,7 @@ jobs:
520520 uses: actions/checkout@v4
521521
522522 - name: Run Trivy vulnerability scanner with rootfs command
523- uses: aquasecurity/trivy-action@0.35 .0
523+ uses: aquasecurity/trivy-action@v0.36 .0
524524 with:
525525 scan-type: 'rootfs'
526526 scan-ref: 'rootfs-example-binary'
@@ -560,7 +560,7 @@ jobs:
560560 uses: actions/checkout@v4
561561
562562 - name: Run Trivy vulnerability scanner in IaC mode
563- uses: aquasecurity/trivy-action@0.35 .0
563+ uses: aquasecurity/trivy-action@v0.36 .0
564564 with:
565565 scan-type: 'config'
566566 hide-progress: true
@@ -617,7 +617,7 @@ jobs:
617617 uses: actions/checkout@v4
618618
619619 - name: Run Trivy in GitHub SBOM mode and submit results to Dependency Graph
620- uses: aquasecurity/trivy-action@0.35 .0
620+ uses: aquasecurity/trivy-action@v0.36 .0
621621 with:
622622 scan-type: 'fs'
623623 format: 'github'
@@ -647,7 +647,7 @@ jobs:
647647 runs-on: ubuntu-latest
648648 steps:
649649 - name: Scan image in a private registry
650- uses: aquasecurity/trivy-action@0.35 .0
650+ uses: aquasecurity/trivy-action@v0.36 .0
651651 with:
652652 image-ref: "private_image_registry/image_name:image_tag"
653653 scan-type: image
@@ -693,7 +693,7 @@ jobs:
693693 uses: actions/checkout@v4
694694
695695 - name: Run Trivy vulnerability scanner
696- uses: aquasecurity/trivy-action@0.35 .0
696+ uses: aquasecurity/trivy-action@v0.36 .0
697697 with:
698698 image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
699699 format: 'sarif'
@@ -732,7 +732,7 @@ jobs:
732732 uses: actions/checkout@v4
733733
734734 - name: Run Trivy vulnerability scanner
735- uses: aquasecurity/trivy-action@0.35 .0
735+ uses: aquasecurity/trivy-action@v0.36 .0
736736 with:
737737 image-ref: 'aws_account_id.dkr.ecr.region.amazonaws.com/imageName:${{ github.sha }}'
738738 format: 'sarif'
@@ -771,7 +771,7 @@ jobs:
771771 uses: actions/checkout@v4
772772
773773 - name: Run Trivy vulnerability scanner
774- uses: aquasecurity/trivy-action@0.35 .0
774+ uses: aquasecurity/trivy-action@v0.36 .0
775775 with:
776776 image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
777777 format: 'sarif'
@@ -807,7 +807,7 @@ jobs:
807807 uses: actions/checkout@v4
808808
809809 - name: Run Trivy vulnerability scanner
810- uses: aquasecurity/trivy-action@0.35 .0
810+ uses: aquasecurity/trivy-action@v0.36 .0
811811 with:
812812 image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
813813 format: 'sarif'
@@ -830,7 +830,7 @@ This step is especially useful for private repositories without [GitHub Advanced
830830
831831` ` ` yaml
832832- name: Run Trivy scanner
833- uses: aquasecurity/trivy-action@0.35 .0
833+ uses: aquasecurity/trivy-action@v0.36 .0
834834 with:
835835 scan-type: config
836836 hide-progress: true
0 commit comments