c07df6fec6
chore(deps): bump the actions group across 1 directory with 3 updates ( #581 )
...
Bumps the actions group with 3 updates in the / directory: [actions/cache](https://github.com/actions/cache ), [actions/checkout](https://github.com/actions/checkout ) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ).
Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9 )
Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
Updates `zizmorcore/zizmor-action` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/5f14fd08f7cf1cb1609c1e344975f152c7ee938d...192e21d79ab29983730a13d1382995c2307fbcaa )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 11:49:20 +06:00
df678dbccf
chore(deps): Update trivy to v0.72.0 ( #580 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2026-06-30 15:52:44 +06:00
cf5c088a69
chore(deps): Update trivy to v0.71.2 ( #577 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2026-06-19 16:50:01 +06:00
476e4fdcdc
chore(deps): bump the actions group across 1 directory with 4 updates ( #574 )
...
Bumps the actions group with 4 updates in the / directory: [aquasecurity/setup-trivy](https://github.com/aquasecurity/setup-trivy ), [actions/checkout](https://github.com/actions/checkout ), [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ).
Updates `aquasecurity/setup-trivy` from 0.2.6 to 0.3.1
- [Release notes](https://github.com/aquasecurity/setup-trivy/releases )
- [Commits](https://github.com/aquasecurity/setup-trivy/compare/3fb12ec12f41e471780db15c232d5dd185dcb514...81e514348e19b6112ce2a7e3ecbafe19c1e1f567 )
Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/create-github-app-token/compare/1b10c78c7865c340bc4f6099eb2f838309f1e8c3...bcd2ba49218906704ab6c1aa796996da409d3eb1 )
Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/b1d7e1fb5de872772f31590499237e7cce841e8e...5f14fd08f7cf1cb1609c1e344975f152c7ee938d )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: aquasecurity/setup-trivy
dependency-version: 0.3.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 16:39:50 +06:00
52d14fa83d
ci: fix zizmor github-app and unpinned-tools issues ( #570 )
...
* ci: fix zizmor github-app and unpinned-tools issues
* chore: update comment
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
---------
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
2026-06-15 16:31:36 +06:00
e671314e1a
chore(deps): Update trivy to v0.71.1 ( #575 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2026-06-15 15:20:55 +06:00
bfa4b33a02
docs: replace @master refs with @v0.36.0 in README examples ( #572 )
2026-06-01 21:00:27 +06:00
68b488a75b
chore(deps): Update trivy to v0.71.0 ( #571 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2026-06-01 19:59:01 +06:00
314ff8b431
ci: migrate from PAT to GitHub App token ( #565 )
...
* ci: migrate from PAT to GitHub App token
* chore: remove unnecessary declaration of permissions
2026-05-13 18:43:43 +06:00
ed142fd067
chore: update action version to v0.36.0 in examples ( #563 )
2026-04-22 15:20:48 +06:00
dea62cf79a
chore(deps): Update trivy to v0.70.0 ( #559 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2026-04-22 12:55:59 +06:00
128d9a8815
chore: use GitHub Actions as git commit author in bump-trivy workflow ( #561 )
2026-04-21 13:10:35 +06:00
876cf04c63
Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #549 ( #548 )
2026-04-17 11:19:56 +06:00
dada78485d
Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name ( #547 )
2026-04-17 10:50:30 +06:00
4a2deec910
fix: use portable shebang in entrypoint.sh ( #545 )
2026-04-17 10:19:18 +06:00
1994662b55
chore(deps): bump the actions group with 5 updates ( #558 )
...
* chore(deps): bump the actions group with 5 updates
Bumps the actions group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [aquasecurity/setup-trivy](https://github.com/aquasecurity/setup-trivy ) | `e6c2c5e321ed9123bda567646e2f96565e34abe1` | `3fb12ec12f41e471780db15c232d5dd185dcb514` |
| [actions/cache](https://github.com/actions/cache ) | `4.2.4` | `5.0.4` |
| [actions/checkout](https://github.com/actions/checkout ) | `4.3.1` | `6.0.2` |
| [bats-core/bats-action](https://github.com/bats-core/bats-action ) | `3.0.1` | `4.0.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) | `0.5.0` | `0.5.2` |
Updates `aquasecurity/setup-trivy` from e6c2c5e321ed9123bda567646e2f96565e34abe1 to 3fb12ec12f41e471780db15c232d5dd185dcb514
- [Release notes](https://github.com/aquasecurity/setup-trivy/releases )
- [Commits](https://github.com/aquasecurity/setup-trivy/compare/e6c2c5e321ed9123bda567646e2f96565e34abe1...3fb12ec12f41e471780db15c232d5dd185dcb514 )
Updates `actions/cache` from 4.2.4 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/0400d5f644dc74513175e3cd8d07132dd4860809...27d5ce7f107fe9357f9df03efb73ab90386fccae )
Updates `actions/checkout` from 4.3.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd )
Updates `bats-core/bats-action` from 3.0.1 to 4.0.0
- [Release notes](https://github.com/bats-core/bats-action/releases )
- [Commits](https://github.com/bats-core/bats-action/compare/42fcc8700f773c075a16a90eb11674c0318ad507...77d6fb60505b4d0d1d73e48bd035b55074bbfb43 )
Updates `zizmorcore/zizmor-action` from 0.5.0 to 0.5.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d...b1d7e1fb5de872772f31590499237e7cce841e8e )
---
updated-dependencies:
- dependency-name: aquasecurity/setup-trivy
dependency-version: 3fb12ec12f41e471780db15c232d5dd185dcb514
dependency-type: direct:production
dependency-group: actions
- dependency-name: actions/cache
dependency-version: 5.0.4
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: bats-core/bats-action
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
* style: change setup-trivy version in comment
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2026-04-15 15:22:02 +06:00
6b36659d99
chore: add zizmor config ( #557 )
2026-04-15 14:40:40 +06:00
316aa5aebe
ci: add dependabot config ( #556 )
2026-04-15 14:40:22 +06:00
264c9c5e18
test: use pinned digests for trivy-db, trivy-java-db and trivy-checks ( #555 )
2026-04-13 14:53:11 +06:00
aeb13962e8
ci: replace peter-evans/create-pull-request with gh CLI ( #550 )
...
* ci: replace peter-evans/create-pull-request with gh CLI
* chore: use ID+USERNAME pattern for GH actions bot
* chore: add specific files to git index
* chore: merge check outputs into create PR step
2026-04-13 13:49:15 +06:00
f685ba7215
ci: use action.yaml as single source of truth for Trivy version ( #552 )
...
* ci: use action.yaml as single source of truth for Trivy version
* dev: add yq check and configurable Trivy install directory
2026-04-10 17:29:15 +06:00
34f2b232c5
chore(ci): update bump-trivy workflow ( #546 )
2026-04-10 14:17:09 +06:00
57a97c7e78
chore(deps): Update trivy to v0.69.3 ( #519 )
...
Co-authored-by: nikpivkin <nikpivkin@users.noreply.github.com >
2026-03-04 13:13:53 +06:00
97e0b3872f
chore: bump Trivy version to v0.69.2 in test workflow and README ( #515 )
2026-03-02 09:22:29 +06:00
4c61e6329b
chore: bump default Trivy version to v0.69.2 ( #513 )
2026-03-02 08:54:24 +06:00
1bd062560b
Merge pull request #508 from nikpivkin/feat/pass-yaml-ignore-file
...
feat: add YAML support for trivyignores
2026-02-25 17:27:51 +06:00
bce3086c4a
remove unused init-cache target
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-25 15:17:00 +06:00
5a9fbb1236
supress progress bar when download db
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-25 15:15:54 +06:00
16154502ca
update trivyignores input description
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-25 13:20:10 +06:00
df85774a45
add comment about fd3
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-25 13:06:11 +06:00
56c8daebb9
remove unused variable
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-25 12:50:43 +06:00
e368e32897
ci(test): add zizmor security linter for GitHub Actions ( #502 )
...
* ci: add zizmor security linter for GitHub Actions
* ci: disable advanced-security for zizmor
* ci: pin all actions to commit hashes
* ci: fix zizmor linter errors in workflows
- Add explicit permissions blocks to all workflows
- Set persist-credentials: false for checkout actions
- Fix template injection by using env variables in run blocks
* fix: address zizmor template injection warnings in action.yaml
- Move inputs to env block to prevent template injection
- Add ignore comment for github-env false positive
* ci: fix remaining zizmor linter errors
- Add permissions and persist-credentials to test.yaml
- Fix ignore comment placement for github-env in action.yaml
2026-02-20 15:24:24 -07:00
6476b939ea
feat: support for YAML ignore file
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-20 19:06:31 +06:00
c1824fd6ed
chore(deps): Update trivy to v0.69.1 ( #506 )
...
Co-authored-by: simar7 <simar7@users.noreply.github.com >
2026-02-12 12:51:05 -07:00
bc61dc5570
Merge commit from fork
2026-02-12 12:41:16 -07:00
5eb7ef2605
ci: use checks bundle v2 in sync workflow ( #505 )
...
* ci: use checks bundle v2 in sync workflow
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
* test: update golden files
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
---------
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2026-02-12 12:37:57 -07:00
22438a4357
Merge pull request #496 from aquasecurity/bump-trivy-1765431074
2025-12-11 14:34:44 +06:00
0024b3f39e
chore(deps): Update trivy to v0.68.1
2025-12-11 05:31:14 +00:00
83690f7d38
ci: install trivy in bump-trivy workflow and update tests ( #495 )
...
* ci: install trivy in bump-trivy workflow
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
* test: diasble list-all-pkgs and remove ReportID
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
* ci: run tests after updating golden files
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
* fix BATS_LIB_PATH setting
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
---------
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-12-10 22:30:00 -07:00
df65449f48
chore: update README ( #493 )
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-12-08 17:02:57 -07:00
0317097f59
ci: use setup-bats in bump-trivy workflow ( #494 )
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-12-08 17:02:32 -07:00
b6643a29fe
Update setup-trivy action to version v0.2.4 ( #486 )
2025-08-29 14:43:29 +06:00
f9424c10c3
Merge pull request #481 from aquasecurity/bump-trivy-1755898251
2025-08-27 13:19:48 +06:00
85abccb4a4
dev: delete fanal.db before tests
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-08-27 13:05:59 +06:00
a1698702b6
ci: update golden files on Trivy bump
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-08-27 12:33:47 +06:00
71f6a8fb8b
dev: add update-golden goal
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-08-27 12:20:05 +06:00
bf330b1153
test: update golden files
...
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
2025-08-27 12:19:06 +06:00
644762e8d4
Merge pull request #482 from aquasecurity/fix-gh-actions
2025-08-27 11:56:15 +06:00
f2e28516ef
chore(ci): Add oras to correctly setup sync jobs
2025-08-26 19:17:21 -06:00
636fd3c4eb
fix: update tests
2025-08-26 19:12:07 -06:00
dependabot[bot]