From b6f388a58bf1f60278325a462ec205ec7ff6b261 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 00:56:33 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `aquasecurity/trivy-action` from a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 to ed142fd0673e97e23eac54620cfb913e5ce36c25 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8...ed142fd0673e97e23eac54620cfb913e5ce36c25) Updates `github/codeql-action/upload-sarif` from 8498dc4c2b27cdd99baf0f87955b29ebbf30c78d to 9b3254085494b55a0f7c4c2b3d2d52cc712ce370 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8498dc4c2b27cdd99baf0f87955b29ebbf30c78d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: ed142fd0673e97e23eac54620cfb913e5ce36c25 dependency-type: direct:production dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 9b3254085494b55a0f7c4c2b3d2d52cc712ce370 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/validate-pr-vulnerabilities.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/validate-pr-vulnerabilities.yml b/.github/workflows/validate-pr-vulnerabilities.yml index e4534cae..4fdc176d 100644 --- a/.github/workflows/validate-pr-vulnerabilities.yml +++ b/.github/workflows/validate-pr-vulnerabilities.yml @@ -24,7 +24,7 @@ jobs: - name: Scan dependencies, IaC and secrets # Pinned to a commit: the action's tags are mutable. - uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: scan-type: fs scanners: vuln,misconfig,secret @@ -38,6 +38,6 @@ jobs: - name: Upload results to the Security tab # Fork PRs get a read-only token, so the upload cannot run there. if: always() && github.event.pull_request.head.repo.full_name == github.repository - uses: github/codeql-action/upload-sarif@8498dc4c2b27cdd99baf0f87955b29ebbf30c78d # v4.39.1 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: trivy.sarif