pin trivy default to v0.57.1

ministryofjustice · Dec 10, 2024 · 5d38514 · 5d38514
1 parent 4d46cd9
commit 5d38514
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform-static-analysis/action.yml b/terraform-static-analysis/action.yml
@@ -53,7 +53,7 @@ inputs:
   trivy_version:
     description: "Specify the version of trivy to install"
     required: false
-    default: "latest"
+    default: "https://github.com/aquasecurity/trivy/commit/b7947b37ee47ea79dff550462c297164eb47aa9e" # v0.57.1
   tfsec_trivy:
     description: "Whether or not to run TF Sec or Trivy, defaults to tfsec [tfsec, trivy]"
     required: false