Merge pull request #1594 from bunkerity/dependabot/github_actions/dev/aquasecurity/trivy-action-0.28.0

deps/gha: Bump aquasecurity/trivy-action from 0.24.0 to 0.28.0
This commit is contained in:
Théophile Diot 2024-10-22 12:09:01 +02:00 committed by GitHub
commit bd46dcf094
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -120,7 +120,7 @@ jobs:
# Check OS vulnerabilities
- name: Check OS vulnerabilities
if: ${{ inputs.CACHE_SUFFIX != 'arm' }}
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0
uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
with:
vuln-type: os
skip-dirs: /root/.cargo