From 0c0bfcbeffe86daef357ba8758f96d061b9de020 Mon Sep 17 00:00:00 2001 From: Hendrik Date: Mon, 23 Mar 2026 09:46:08 +0100 Subject: [PATCH] Update Trivy action version in release workflow Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b9e7ad7..0fa51ff 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -66,7 +66,7 @@ jobs: run: docker buildx build --platform linux/amd64,linux/arm64 -t openreception/open-reception:${{ github.ref_name }} . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master + uses: aquasecurity/trivy-action@0.35.0 with: image-ref: "openreception/open-reception:${{ github.ref_name }}" format: "table"