From b154887dc62a8813c0226084a1d296cd0876d102 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 9 Aug 2026 17:14:25 +0000 Subject: [PATCH] chore(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.36.0 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.28.0 to 0.36.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...v0.36.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7b4fab0..abd7499 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,7 +29,7 @@ jobs: steps: - uses: actions/checkout@v4 - run: docker build --build-arg NEXT_PUBLIC_API_URL=http://localhost:3000 -f apps/${{ matrix.service }}/Dockerfile -t voiceforge-${{ matrix.service }}:${{ github.sha }} . - - uses: aquasecurity/trivy-action@0.28.0 + - uses: aquasecurity/trivy-action@v0.36.0 with: { image-ref: "voiceforge-${{ matrix.service }}:${{ github.sha }}", format: sarif, output: "trivy-${{ matrix.service }}.sarif", severity: "CRITICAL,HIGH", exit-code: "1" } - uses: github/codeql-action/upload-sarif@v3 if: always()