diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7993fa5..c2ba597 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -75,7 +75,7 @@ jobs: - name: Run vulnerability scanner in repo mode if: github.actor != 'dependabot[bot]' - uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # 0.2.2 + uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d # 0.2.2 with: scan-type: 'fs' format: 'sarif' @@ -86,7 +86,7 @@ jobs: - name: Run vulnerability scanner in repo mode if: github.actor == 'dependabot[bot]' - uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # 0.2.2 + uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d # 0.2.2 with: scan-type: 'fs' exit-code: 1