diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 79d77999..31d005c5 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -83,7 +83,7 @@ jobs: - name: Scan image with Trivy id: trivy - uses: aquasecurity/trivy-action@0.30.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build.outputs.digest }} # HIGH is blocking for an accounting application — Trivy's CRITICAL