diff --git a/.github/workflows/security-scans.yml b/.github/workflows/security-scans.yml index 7d30730cdc..95ccba24fe 100644 --- a/.github/workflows/security-scans.yml +++ b/.github/workflows/security-scans.yml @@ -238,7 +238,7 @@ jobs: - name: Trivy image scan scheduler if: matrix.image == 'scheduler' - uses: aquasecurity/trivy-action@22d2755f774d925b191a185b74e782a4b0638a41 # 0.15.0 + uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef # 0.17.0 with: input: "images/${{ matrix.image }}-image.tar" severity: 'CRITICAL,HIGH' @@ -247,7 +247,7 @@ jobs: - name: Trivy image scan if: matrix.image != 'scheduler' - uses: aquasecurity/trivy-action@22d2755f774d925b191a185b74e782a4b0638a41 # 0.15.0 + uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef # 0.17.0 with: input: "images/${{ matrix.image }}-image.tar" severity: 'CRITICAL,HIGH'