diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 8f77240..9b65120 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -424,6 +424,7 @@ jobs: uses: aquasecurity/trivy-action@0.34.1 with: image-ref: 'tor-relay:test' + version: 'v0.69.2' format: 'sarif' output: 'trivy-results.sarif' severity: 'CRITICAL,HIGH,MEDIUM' @@ -461,6 +462,7 @@ jobs: uses: aquasecurity/trivy-action@0.34.1 with: image-ref: 'tor-relay:test' + version: 'v0.69.2' format: 'table' severity: 'CRITICAL,HIGH' vuln-type: 'os,library' @@ -470,6 +472,7 @@ jobs: uses: aquasecurity/trivy-action@0.34.1 with: image-ref: 'tor-relay:test' + version: 'v0.69.2' format: 'json' output: 'trivy-full-report.json' severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' @@ -480,6 +483,7 @@ jobs: uses: aquasecurity/trivy-action@0.34.1 with: image-ref: 'tor-relay:test' + version: 'v0.69.2' scanners: 'secret' format: 'table' continue-on-error: true @@ -488,6 +492,7 @@ jobs: uses: aquasecurity/trivy-action@0.34.1 with: image-ref: 'tor-relay:test' + version: 'v0.69.2' scanners: 'config' format: 'table' continue-on-error: true @@ -497,6 +502,7 @@ jobs: with: scan-type: 'fs' scan-ref: '.' + version: 'v0.69.2' format: 'table' severity: 'CRITICAL,HIGH' scanners: 'vuln,secret,config,license'