diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 11badba..d78ba3e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -216,7 +216,7 @@ jobs: key: trivy-${{ hashFiles('**/pom.xml', '**/Containerfile*') }} # Trivy scan results are influenced by maven dependencies and Containerfile runtime image - name: Scan Image with Aqua Security Trivy - uses: aquasecurity/trivy-action@0.13.0 # https://github.com/marketplace/actions/aqua-security-trivy + uses: aquasecurity/trivy-action@0.16.1 # https://github.com/marketplace/actions/aqua-security-trivy with: image-ref: ${{ env.CONTAINER_IMAGE_URL }} # CONTAINER_IMAGE_URL is defined in GITHUB_ENV vuln-type: 'os,library'