diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index f785adb..cb58f1f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -151,7 +151,7 @@ jobs: key: trivy-${{ hashFiles('**/package-lock.json', '**/Containerfile*') }} # Trivy scan results are influenced by npm dependencies and Containerfile runtime image - name: Scan Image with Aqua Security Trivy - uses: aquasecurity/trivy-action@0.13.0 # https://github.com/marketplace/actions/aqua-security-trivy + uses: aquasecurity/trivy-action@0.16.0 # https://github.com/marketplace/actions/aqua-security-trivy with: image-ref: ${{ env.CONTAINER_IMAGE_URL }} # CONTAINER_IMAGE_URL is defined in GITHUB_ENV vuln-type: 'os,library'