diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 48da993..6f51f0b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -95,7 +95,7 @@ jobs: run: echo "image-name=$(mvn help:evaluate -Dexpression=image.name -q -DforceStdout)" >> $GITHUB_OUTPUT - name: Scan Docker Image for Vulnerabilities - uses: aquasecurity/trivy-action@0.16.1 + uses: aquasecurity/trivy-action@0.17.0 with: image-ref: ${{ steps.get-image-name.outputs.image-name }} format: sarif diff --git a/.github/workflows/scan-docker-image.yml b/.github/workflows/scan-docker-image.yml index 6a0da34..8bf7706 100644 --- a/.github/workflows/scan-docker-image.yml +++ b/.github/workflows/scan-docker-image.yml @@ -32,7 +32,7 @@ jobs: run: echo "image-name=$(mvn help:evaluate -Dexpression=image.name -q -DforceStdout)" >> $GITHUB_OUTPUT - name: Scan Docker Image for Vulnerabilities - uses: aquasecurity/trivy-action@0.16.1 + uses: aquasecurity/trivy-action@0.17.0 with: image-ref: ${{ steps.get-image-name.outputs.image-name }} format: sarif