fix: update trivy to 0.29.0

pantos-io · Nov 21, 2024 · d9e7d70 · d9e7d70
1 parent 2610da2
commit d9e7d70
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/docker-vulnerabilities.yaml b/.github/workflows/docker-vulnerabilities.yaml
@@ -3,6 +3,7 @@ on:
   schedule:
     # At the end of every day
     - cron: "0 0 * * *"
+  pull_request: 
 
 jobs:
     docker-analysis:
@@ -69,7 +70,7 @@ jobs:
                 DOCKER_TAG: analysis-latest
 
             - name: Scan vulnerabilities app image
-              uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
+              uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
               with:           
                 image-ref: 'pantosio/service-node-app:analysis-latest'
                 format: 'sarif'
@@ -85,7 +86,7 @@ jobs:
                 sarif_file: 'trivy-app-results.sarif'
 
             - name: Scan vulnerabilities worker image
-              uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
+              uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
               with:           
                 image-ref: 'pantosio/service-node-worker:analysis-latest'
                 format: 'sarif'