We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6ed4193 commit 4a4de9cCopy full SHA for 4a4de9c
1 file changed
.github/workflows/security.yml
@@ -95,7 +95,7 @@ jobs:
95
- name: Run Trivy vulnerability scanner
96
# Pinned to a SHA — never @master. A moving branch in a
97
# supply-chain workflow defeats the point of the scan.
98
- uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
+ uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
99
with:
100
image-ref: harness-python-react:ci
101
format: table
0 commit comments