diff --git a/.github/workflows/trivy-pr-scan.yml b/.github/workflows/trivy-pr-scan.yml index 3047f238..d47ecc81 100644 --- a/.github/workflows/trivy-pr-scan.yml +++ b/.github/workflows/trivy-pr-scan.yml @@ -50,7 +50,7 @@ jobs: # We will not be concerned with Medium and Low vulnerabilities - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master + uses: aquasecurity/trivy-action@0.33.1 with: image-ref: '${{ github.repository }}:vuln-test' format: 'sarif' @@ -65,4 +65,4 @@ jobs: uses: github/codeql-action/upload-sarif@v3 if: '!cancelled()' with: - sarif_file: 'trivy-results.sarif' \ No newline at end of file + sarif_file: 'trivy-results.sarif'