Skip to content

Pin aquasecuriy/setup-trivy to hash instead of tag #456

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
simar7 merged 3 commits into from
Apr 9, 2025
Merged

Pin aquasecuriy/setup-trivy to hash instead of tag #456

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b2a8272
Pin aquasecuriy/setup-trivy to hash instead of tag
lhotari Apr 2, 2025
28f4580
Address review comment
lhotari Apr 7, 2025
0ca7acf
Revisit previous change based on feedback
lhotari Apr 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion action.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,11 @@ runs:
steps:
- name: Install Trivy
if: ${{ inputs.skip-setup-trivy == 'false' }}
uses: aquasecurity/setup-trivy@v0.2.2
# Pin to hash instead of tag for aquasecurity/setup-trivy action so that GitHub Actions
# "allowing select actions" feature can be used to whitelist the dependent action by a hash.
# This is needed since some organizations have a policy to only allow pinned 3rd party actions to
# be used.
uses: aquasecurity/setup-trivy@ff1b8b060f23b650436d419b5e13f67f5d4c3087
Comment thread
lhotari marked this conversation as resolved.
Outdated
with:
version: ${{ inputs.version }}
cache: ${{ inputs.cache }}
Expand Down
⚡