Using trivy latest version

Ontotext-AD · Jan 6, 2025 · 94de438 · 94de438
1 parent 48f3f83
commit 94de438
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -38,17 +38,23 @@ jobs:
         name: Run Terraform validate check
         run: terraform validate
 
+      - id:  install_latest_trivy_version
+        uses: aquasecurity/[email protected]
+        with:
+            cache: true
+            version: v0.58.1
+
       - id: run_trivy_config
         name: Run Trivy vulnerability scanner
-        # aquasecurity/[email protected]
-        uses: aquasecurity/[email protected]
+        uses: aquasecurity/trivy-action@master
         with:
           scan-type: config
           trivy-config: trivy.yaml
+          ignore-unfixed: true
           hide-progress: false
           format: sarif
-          ignore_unfixed: true
           output: trivy.sarif
+          skip-setup-trivy: true
 
       - id: run_sarif_upload
         name: Upload Trivy SARIF results