{ "CI_job_history_included": false, "approvals": [], "diff_versions": [ { "commits": [ { "authored_date": null, "commit_author_id": null, "committed_date": null, "committer_id": null, "merge_request_commits_metadata_id": 187, "merge_request_diff_id": 98, "message": null, "project_id": null, "relative_order": 0, "sha": null, "trailers": {} } ], "files": [ { "a_mode": "100644", "b_mode": "100644", "binary": false, "deleted_file": false, "diff": "@@ -52,7 +52,7 @@ jobs:\n cache-to: type=gha,mode=max\n \n - name: Run Trivy vulnerability scanner\n- uses: aquasecurity/trivy-action@0.27.0\n+ uses: aquasecurity/trivy-action@0.33.1\n with:\n image-ref: ghcr.io/thoguet/vac-optimizer@${{ steps.build.outputs.digest }}\n format: 'sarif'\n", "encoded_file_path": false, "external_diff_offset": null, "external_diff_size": null, "generated": false, "merge_request_diff_id": 98, "new_file": false, "new_path": null, "old_path": ".github/workflows/docker-build-push.yml", "project_id": 35, "relative_order": 0, "renamed_file": false, "too_large": false } ], "metadata": { "base_commit_sha": "81d974cbfe7c8251f3e5568a248bd37ad4b69d77", "commits_count": 1, "created_at": "2026-05-03T15:59:55.679731", "diff_type": 1, "files_count": 1, "head_commit_sha": "3cedc0cb832a95ae5b428a511b2404ce00283a67", "id": 98, "merge_request_id": 98, "project_id": 35, "start_commit_sha": "81d974cbfe7c8251f3e5568a248bd37ad4b69d77", "state": "collected", "stored_externally": null, "updated_at": "2026-05-03T15:59:55.986586" } } ], "discussions": [ { "id": "250562e3b8101fcb80a8ffb260ed7fd1ac9ccce5", "individual_note": true, "notes": [ { "author": { "avatar_url": "https://secure.gravatar.com/avatar/5e51e115b51304582ee7b2cd8f249fe3ee71b46510e381f74c032e6de81d2757?s=80&d=identicon", "id": 3, "locked": false, "name": "admin", "public_email": null, "state": "active", "username": "admin-backup", "web_url": "https://gitlab.nessar.fr/admin-backup" }, "body": "*Merged by: THoguet at 2025-11-17 17:48:18 UTC*", "commands_changes": {}, "confidential": false, "created_at": "2025-11-17T17:48:18.000Z", "id": 565, "imported": true, "imported_from": "github", "internal": false, "noteable_id": 98, "noteable_iid": 42, "noteable_type": "MergeRequest", "project_id": 35, "resolvable": false, "system": false, "type": null, "updated_at": "2026-05-03T16:02:50.608Z" } ], "resolvable": false } ], "format_version": 1, "notes": [ { "author_id": 3, "change_position": null, "commit_id": null, "confidential": null, "created_at": "2025-11-17T17:48:18", "discussion_id": "250562e3b8101fcb80a8ffb260ed7fd1ac9ccce5", "id": 565, "imported_from": 4, "internal": false, "last_edited_at": null, "line_code": null, "namespace_id": null, "note": "*Merged by: THoguet at 2025-11-17 17:48:18 UTC*", "noteable_id": 98, "noteable_type": "MergeRequest", "organization_id": null, "original_position": null, "position": null, "project_id": 35, "resolved_at": null, "resolved_by_id": null, "resolved_by_push": null, "review_id": null, "source_iid": 42, "source_item_project_id": 35, "st_diff": null, "system": false, "type": null, "updated_at": "2026-05-03T16:02:50.608068", "updated_by_id": null } ], "preexisting_missing_alternate_head": false, "source_assignees": [], "source_author": { "avatar_url": "https://secure.gravatar.com/avatar/5e51e115b51304582ee7b2cd8f249fe3ee71b46510e381f74c032e6de81d2757?s=80&d=identicon", "id": 3, "locked": false, "name": "admin", "public_email": null, "state": "active", "username": "admin-backup", "web_url": "https://gitlab.nessar.fr/admin-backup" }, "source_created_at": "2025-11-10T18:56:54.000Z", "source_discussion_locked": null, "source_id": 98, "source_iid": 42, "source_item_metadata": { "assignee": null, "assignees": [], "author": { "avatar_url": "https://secure.gravatar.com/avatar/5e51e115b51304582ee7b2cd8f249fe3ee71b46510e381f74c032e6de81d2757?s=80&d=identicon", "id": 3, "locked": false, "name": "admin", "public_email": null, "state": "active", "username": "admin-backup", "web_url": "https://gitlab.nessar.fr/admin-backup" }, "blocking_discussions_resolved": true, "closed_at": null, "closed_by": null, "created_at": "2025-11-10T18:56:54.000Z", "description": "Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.27.0 to 0.33.1.\n
\nRelease notes\n

Sourced from aquasecurity/trivy-action's releases.

\n
\n

v0.33.1

\n

What's Changed

\n\n

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.33.0...0.33.1

\n

v0.33.0

\n

What's Changed

\n\n

New Contributors

\n\n

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.32.0...0.33.0

\n

v0.32.0

\n

What's Changed

\n\n

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.31.0...0.32.0

\n

v0.31.0

\n

What's Changed

\n\n

New Contributors

\n\n

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.30.0...0.31.0

\n

v0.30.0

\n

What's Changed

\n\n\n
\n

... (truncated)

\n
\n
\nCommits\n\n
\n
\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aquasecurity/trivy-action&package-manager=github_actions&previous-version=0.27.0&new-version=0.33.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n
\nDependabot commands and options\n
\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n
", "detailed_merge_status": "unchecked", "discussion_locked": null, "downvotes": 0, "draft": false, "force_remove_source_branch": null, "has_conflicts": false, "id": 98, "iid": 42, "imported": true, "imported_from": "github", "labels": [ "dependencies", "github_actions" ], "merge_after": null, "merge_commit_sha": null, "merge_status": "unchecked", "merge_user": { "avatar_url": "https://secure.gravatar.com/avatar/5e51e115b51304582ee7b2cd8f249fe3ee71b46510e381f74c032e6de81d2757?s=80&d=identicon", "id": 3, "locked": false, "name": "admin", "public_email": null, "state": "active", "username": "admin-backup", "web_url": "https://gitlab.nessar.fr/admin-backup" }, "merge_when_pipeline_succeeds": false, "merged_at": "2025-11-17T17:48:18.000Z", "merged_by": { "avatar_url": "https://secure.gravatar.com/avatar/5e51e115b51304582ee7b2cd8f249fe3ee71b46510e381f74c032e6de81d2757?s=80&d=identicon", "id": 3, "locked": false, "name": "admin", "public_email": null, "state": "active", "username": "admin-backup", "web_url": "https://gitlab.nessar.fr/admin-backup" }, "milestone": null, "prepared_at": null, "project_id": 35, "reference": "!42", "references": { "full": "nessar/vac-optimizer!42", "relative": "!42", "short": "!42" }, "reviewers": [], "sha": "3cedc0cb832a95ae5b428a511b2404ce00283a67", "should_remove_source_branch": null, "source_branch": "dependabot/github_actions/aquasecurity/trivy-action-0.33.1", "source_project_id": 35, "squash": false, "squash_commit_sha": null, "squash_on_merge": false, "state": "merged", "target_branch": "main", "target_project_id": 35, "task_completion_status": { "completed_count": 0, "count": 0 }, "time_stats": { "human_time_estimate": null, "human_total_time_spent": null, "time_estimate": 0, "total_time_spent": 0 }, "title": "Bump aquasecurity/trivy-action from 0.27.0 to 0.33.1", "updated_at": "2025-11-17T17:48:20.000Z", "upvotes": 0, "user_notes_count": 1, "web_url": "https://gitlab.nessar.fr/nessar/vac-optimizer/-/merge_requests/42", "work_in_progress": false }, "source_kind": "MergeRequest", "source_path": "nessar/vac-optimizer", "source_project_id": 35, "source_reviewers": [], "source_updated_at": "2025-11-17T17:48:20.000Z", "state_events": [ { "close_after_error_tracking_resolve": false, "close_auto_resolve_prometheus_alert": false, "created_at": "2025-11-17T17:48:18+00:00", "epic_id": null, "id": 288, "imported_from": 4, "issue_id": null, "merge_request_id": 98, "namespace_id": 38, "source_commit": null, "source_merge_request_id": null, "state": 2, "user_id": 3 }, { "close_after_error_tracking_resolve": false, "close_auto_resolve_prometheus_alert": false, "created_at": "2025-11-17T17:48:18+00:00", "epic_id": null, "id": 290, "imported_from": 4, "issue_id": null, "merge_request_id": 98, "namespace_id": 38, "source_commit": "437d5fca9c9578b7b90c27042e40aad94030f4cc", "source_merge_request_id": null, "state": 3, "user_id": 3 } ], "target_number": 120 }