From 40e176cb46b2286d64a998937357b9e31cfaf04d Mon Sep 17 00:00:00 2001 From: Paul Nothaft Date: Wed, 13 May 2026 17:59:38 +0200 Subject: [PATCH] =?UTF-8?q?fix(ci):=20trivy-action=20tag=20is=20v0.36.0=20?= =?UTF-8?q?(was=200.28.0=20=E2=80=94=20does=20not=20exist)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Initial pinning shipped a tag that doesn't exist in the aquasecurity/trivy-action repo. Workflow run failed with: Unable to resolve action 'aquasecurity/trivy-action@0.28.0', unable to find version '0.28.0' The repo's tags use a v prefix (v0.36.0, v0.35.0, …). Bumping both occurrences (build-backend and build-frontend matrix jobs) to v0.36.0, which is the latest stable as of 2026-04-22. --- .github/workflows/docker-build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index d55668ef..59fc5eb7 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -172,7 +172,7 @@ jobs: # audit pass first so the next beta build doesn't surprise red. - name: Run Trivy vulnerability scanner (per-arch, by digest) if: steps.push-decision.outputs.push == 'true' - uses: aquasecurity/trivy-action@0.28.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: ${{ env.REGISTRY }}/${{ env.BACKEND_IMAGE_NAME }}@${{ steps.build.outputs.digest }} format: 'sarif' @@ -378,7 +378,7 @@ jobs: # SARIF filename + category change. - name: Run Trivy vulnerability scanner (per-arch, by digest) if: steps.push-decision.outputs.push == 'true' - uses: aquasecurity/trivy-action@0.28.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: ${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE_NAME }}@${{ steps.build.outputs.digest }} format: 'sarif'