diff --git a/.github/workflows/trivy-scan.yaml b/.github/workflows/trivy-scan.yaml index 02ac7c6d8..941d32be7 100644 --- a/.github/workflows/trivy-scan.yaml +++ b/.github/workflows/trivy-scan.yaml @@ -20,7 +20,7 @@ jobs: - name: Checkout code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # master + uses: aquasecurity/trivy-action@76071ef0d7ec797419534a183b498b4d6366cf37 # master with: image-ref: 'docker.io/coredns/coredns:${{ matrix.versions }}' severity: 'CRITICAL,HIGH'