Skip to content

Update Trivy scan workflow to use @master #117

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gvatsal60 merged 4 commits into from
Aug 13, 2026
Merged

Update Trivy scan workflow to use @master #117

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
dc9b0e6
Update Trivy scan workflow to use @master
gvatsal60 Aug 13, 2026
3493761
Pin Trivy workflow reference to commit SHA for SonarCloud compliance
gvatsal60 Aug 13, 2026
5eaed44
Fix: use correct central workflow SHA
gvatsal60 Aug 13, 2026
1b6ee1c
Add security-events: write permission
gvatsal60 Aug 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions .github/workflows/trivy-scan.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
name: Trivy Scan
on:
pull_request:
push:
branches: ["master", "main"]
permissions:
contents: read
security-events: write
jobs:
trivy-scan:
uses: gvatsal60/.github/.github/workflows/trivy-scan.yaml@c36e485abb6a54a707d295bb3f8bf48ea5b61aa7
with:
dockerfile_exists: false
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed