deps: update aquasecurity/trivy-action action to v0.17.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy-action	action	minor	0.15.0 -> 0.17.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.17.0

Compare Source

What's Changed

• docs: add configuration info for flags not supported by inputs by @​DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/296
• fix: Fix skip-files and hide-progress options not being applied when using Sarif report format by @​simao-silva in https://github.com/aquasecurity/trivy-action/pull/297
• Upgrades Trivy from 0.48.1 to v0.49.0 by @​kderck in https://github.com/aquasecurity/trivy-action/pull/304

New Contributors

• @​simao-silva made their first contribution in https://github.com/aquasecurity/trivy-action/pull/297

Full Changelog: aquasecurity/trivy-action@0.16.1...0.17.0

v0.16.1

Compare Source

What's Changed

• Update Trivy to 0.48.1 by @​MartiUK in https://github.com/aquasecurity/trivy-action/pull/291
• docs: fix typo in README.md by @​hairmare in https://github.com/aquasecurity/trivy-action/pull/293

New Contributors

• @​MartiUK made their first contribution in https://github.com/aquasecurity/trivy-action/pull/291
• @​hairmare made their first contribution in https://github.com/aquasecurity/trivy-action/pull/293

Full Changelog: aquasecurity/trivy-action@0.16.0...0.16.1

v0.16.0

Compare Source

What's Changed

• Update to trivy version 0.48.0 by @​pragmaticivan in https://github.com/aquasecurity/trivy-action/pull/289

New Contributors

• @​pragmaticivan made their first contribution in https://github.com/aquasecurity/trivy-action/pull/289

Full Changelog: aquasecurity/trivy-action@0.15.0...0.16.0

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (ce57993) 85.75% compared to head (22df3fd) 86.58%.
Report is 7 commits behind head on main.

❗ Current head 22df3fd differs from pull request most recent head 0f4ffec. Consider uploading reports for the commit 0f4ffec to get more accurate results

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2667      +/-   ##
==========================================
+ Coverage   85.75%   86.58%   +0.83%     
==========================================
  Files         162      168       +6     
  Lines       10351    11176     +825     
==========================================
+ Hits         8876     9677     +801     
- Misses       1186     1218      +32     
+ Partials      289      281       -8     

see 72 files with indirect coverage changes

Flag	Coverage Δ
certificate-operator	67.42% <ø> (ø)
component-tests	56.84% <ø> (+0.84%)	⬆️
lifecycle-operator	86.27% <ø> (+0.99%)	⬆️
metrics-operator	87.43% <ø> (-0.21%)	⬇️
scheduler	36.53% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[odubajDT]

There seems to be a problem with python-runtime image, will try to investigate what the issue is

https://github.com/keptn/lifecycle-toolkit/actions/runs/7178990263/job/19548295006

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[RealAnna]

seems to be a false positive from trivy aquasecurity/trivy#5871 it is a known issue I would skip the update until they patch it

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[odubajDT]

security scan https://github.com/keptn/lifecycle-toolkit/actions/runs/7950633799