From 15dbfb497103f0e12b64b59a106a0de31deb4841 Mon Sep 17 00:00:00 2001 From: marvin Date: Sat, 12 Sep 2026 14:08:35 -0400 Subject: [PATCH] Fix Trivy action version pin again (use existing 0.35.0 tag) --- .github/workflows/container.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml index 2a30924..82090a4 100644 --- a/.github/workflows/container.yml +++ b/.github/workflows/container.yml @@ -53,7 +53,7 @@ jobs: run: docker run --rm --entrypoint node site-gateway:smoke-test --input-type=module -e "import { DatabaseSync } from 'node:sqlite'; const db = new DatabaseSync(':memory:'); db.exec('CREATE TABLE smoke (id INTEGER)'); db.close();" - name: Scan image for vulnerabilities - uses: aquasecurity/trivy-action@0.36.0 + uses: aquasecurity/trivy-action@0.35.0 with: image-ref: site-gateway:smoke-test severity: CRITICAL,HIGH