diff --git a/.github/actions/trivy-scan/action.yml b/.github/actions/trivy-scan/action.yml index 0bdc35b..65ead98 100644 --- a/.github/actions/trivy-scan/action.yml +++ b/.github/actions/trivy-scan/action.yml @@ -70,7 +70,7 @@ runs: steps: - name: Run Trivy Scan continue-on-error: true - uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1, use sha to align security guidelines + uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0, use sha to align security guidelines with: scan-type: ${{ inputs.scan-type }} scan-ref: ${{ inputs.scan-ref }} @@ -228,13 +228,6 @@ runs: - 🟡 Medium: $HIGH - 🔵 Low/Info: $MEDIUM -
- 📋 Top Vulnerabilities - - $(jq -r '[.runs[].results // [] | .[] | select(.level == "error" or .level == "warning")] | .[0:10] | .[] | "- **\(.ruleId // "unknown")**: \(.message.text // "No description") (\(.locations[0].physicalLocation.artifactLocation.uri // "unknown"))"' "$SARIF_FILE" 2>/dev/null || echo "No details available") - -
- ${FOOTER_LINE} 🕐 Last updated: $(date -u '+%Y-%m-%d %H:%M:%S UTC') | Commit: ${SHORT_SHA}"