Bump aquasecurity/trivy-action from 0.27.0 to 0.33.1 #120

2025-11-10T19:56:54+01:00

admin-backup commented

2025-11-10 19:56:54 +01:00

(Migrated from 172.24.0.1:8928)

Bumps aquasecurity/trivy-action from 0.27.0 to 0.33.1.

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.33.1

What's Changed

Update setup-trivy action to version v0.2.4 by @martincostello in aquasecurity/trivy-action#486

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.33.0...0.33.1

v0.33.0

What's Changed

Update dependencies in README by @ibakshay in aquasecurity/trivy-action#378

doc: correct sbom fs scan by @yxtay in aquasecurity/trivy-action#458

Pin actions/cache by SHA by @martincostello in aquasecurity/trivy-action#480

chore(ci): Add oras to correctly setup sync jobs by @simar7 in aquasecurity/trivy-action#482

chore(deps): Update trivy to v0.65.0 by @aqua-bot in aquasecurity/trivy-action#481

New Contributors

@ibakshay made their first contribution in aquasecurity/trivy-action#378

@yxtay made their first contribution in aquasecurity/trivy-action#458

@martincostello made their first contribution in aquasecurity/trivy-action#480

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.32.0...0.33.0

v0.32.0

What's Changed

chore(deps): Update trivy to v0.64.1 by @aqua-bot in aquasecurity/trivy-action#474

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.31.0...0.32.0

v0.31.0

What's Changed

docs: add info that unix:/ prefix is required for docker-host input by @DmitriyLewen in aquasecurity/trivy-action#455

Fix Trivy action inputs leaking between invocations (#422) by @rvesse in aquasecurity/trivy-action#454

Pin aquasecuriy/setup-trivy to hash instead of tag by @lhotari in aquasecurity/trivy-action#456

Bump Trivy version to fix GitHub actions by @maximmasiutin in aquasecurity/trivy-action#460

refactor: use ubuntu 24.04 in example code by @simar7 in aquasecurity/trivy-action#465

ci: fix workflow to bump Trivy by @nikpivkin in aquasecurity/trivy-action#466

chore(deps): Update trivy to v0.63.0 by @aqua-bot in aquasecurity/trivy-action#467

New Contributors

@lhotari made their first contribution in aquasecurity/trivy-action#456

@maximmasiutin made their first contribution in aquasecurity/trivy-action#460

@aqua-bot made their first contribution in aquasecurity/trivy-action#467

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.30.0...0.31.0

v0.30.0

What's Changed

fix: Update default trivy version in README by @derrix060 in aquasecurity/trivy-action#444

fix: typo in description of an input for action.yaml by @yutatokoi in aquasecurity/trivy-action#452

... (truncated)

Commits

b6643a2 Update setup-trivy action to version v0.2.4 (#486)
f9424c1 Merge pull request #481 from aquasecurity/bump-trivy-1755898251
85abccb dev: delete fanal.db before tests
a169870 ci: update golden files on Trivy bump
71f6a8f dev: add update-golden goal
bf330b1 test: update golden files
644762e Merge pull request #482 from aquasecurity/fix-gh-actions
f2e2851 chore(ci): Add oras to correctly setup sync jobs
636fd3c fix: update tests
7c0244b chore(deps): Update trivy to v0.65.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.27.0 to 0.33.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's releases</a>.</em></p> <blockquote> <h2>v0.33.1</h2> <h2>What's Changed</h2> <ul> <li>Update setup-trivy action to version v0.2.4 by <a href="https://github.com/martincostello"><code>@martincostello</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/486">aquasecurity/trivy-action#486</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.33.0...0.33.1">https://github.com/aquasecurity/trivy-action/compare/0.33.0...0.33.1</a></p> <h2>v0.33.0</h2> <h2>What's Changed</h2> <ul> <li>Update dependencies in README by <a href="https://github.com/ibakshay"><code>@ibakshay</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/378">aquasecurity/trivy-action#378</a></li> <li>doc: correct sbom fs scan by <a href="https://github.com/yxtay"><code>@yxtay</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/458">aquasecurity/trivy-action#458</a></li> <li>Pin actions/cache by SHA by <a href="https://github.com/martincostello"><code>@martincostello</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/480">aquasecurity/trivy-action#480</a></li> <li>chore(ci): Add oras to correctly setup sync jobs by <a href="https://github.com/simar7"><code>@simar7</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/482">aquasecurity/trivy-action#482</a></li> <li>chore(deps): Update trivy to v0.65.0 by <a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/481">aquasecurity/trivy-action#481</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ibakshay"><code>@ibakshay</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/378">aquasecurity/trivy-action#378</a></li> <li><a href="https://github.com/yxtay"><code>@yxtay</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/458">aquasecurity/trivy-action#458</a></li> <li><a href="https://github.com/martincostello"><code>@martincostello</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/480">aquasecurity/trivy-action#480</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.32.0...0.33.0">https://github.com/aquasecurity/trivy-action/compare/0.32.0...0.33.0</a></p> <h2>v0.32.0</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): Update trivy to v0.64.1 by <a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/474">aquasecurity/trivy-action#474</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.31.0...0.32.0">https://github.com/aquasecurity/trivy-action/compare/0.31.0...0.32.0</a></p> <h2>v0.31.0</h2> <h2>What's Changed</h2> <ul> <li>docs: add info that <code>unix:/</code> prefix is required for <code>docker-host</code> input by <a href="https://github.com/DmitriyLewen"><code>@DmitriyLewen</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/455">aquasecurity/trivy-action#455</a></li> <li>Fix Trivy action inputs leaking between invocations (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/422">#422</a>) by <a href="https://github.com/rvesse"><code>@rvesse</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/454">aquasecurity/trivy-action#454</a></li> <li>Pin aquasecuriy/setup-trivy to hash instead of tag by <a href="https://github.com/lhotari"><code>@lhotari</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/456">aquasecurity/trivy-action#456</a></li> <li>Bump Trivy version to fix GitHub actions by <a href="https://github.com/maximmasiutin"><code>@maximmasiutin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/460">aquasecurity/trivy-action#460</a></li> <li>refactor: use ubuntu 24.04 in example code by <a href="https://github.com/simar7"><code>@simar7</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/465">aquasecurity/trivy-action#465</a></li> <li>ci: fix workflow to bump Trivy by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/466">aquasecurity/trivy-action#466</a></li> <li>chore(deps): Update trivy to v0.63.0 by <a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/467">aquasecurity/trivy-action#467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lhotari"><code>@lhotari</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/456">aquasecurity/trivy-action#456</a></li> <li><a href="https://github.com/maximmasiutin"><code>@maximmasiutin</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/460">aquasecurity/trivy-action#460</a></li> <li><a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/467">aquasecurity/trivy-action#467</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.30.0...0.31.0">https://github.com/aquasecurity/trivy-action/compare/0.30.0...0.31.0</a></p> <h2>v0.30.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Update default trivy version in README by <a href="https://github.com/derrix060"><code>@derrix060</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/444">aquasecurity/trivy-action#444</a></li> <li>fix: typo in description of an input for action.yaml by <a href="https://github.com/yutatokoi"><code>@yutatokoi</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/452">aquasecurity/trivy-action#452</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aquasecurity/trivy-action/commit/b6643a29fecd7f34b3597bc6acb0a98b03d33ff8"><code>b6643a2</code></a> Update setup-trivy action to version v0.2.4 (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/486">#486</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/f9424c10c36e288d5fa79bd3dfd1aeb2d6eae808"><code>f9424c1</code></a> Merge pull request <a href="https://redirect.github.com/aquasecurity/trivy-action/issues/481">#481</a> from aquasecurity/bump-trivy-1755898251</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/85abccb4a45b17f7272c97fb6789a215fca1f434"><code>85abccb</code></a> dev: delete fanal.db before tests</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/a1698702b6572282ec311be7857219a18858aa70"><code>a169870</code></a> ci: update golden files on Trivy bump</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/71f6a8fb8bcf6de1e478caf1ffbf96e8634f63e3"><code>71f6a8f</code></a> dev: add update-golden goal</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/bf330b1153903db69c138b270026394621567622"><code>bf330b1</code></a> test: update golden files</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/644762e8d423e0fc08e4420fbb32413b5232e066"><code>644762e</code></a> Merge pull request <a href="https://redirect.github.com/aquasecurity/trivy-action/issues/482">#482</a> from aquasecurity/fix-gh-actions</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/f2e28516ef589ddbea87360e8c8d4ac6e1154111"><code>f2e2851</code></a> chore(ci): Add oras to correctly setup sync jobs</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/636fd3c4eb543cadbbdbe619b32a2e8fa000b199"><code>636fd3c</code></a> fix: update tests</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/7c0244b8c6bbe5b2b98b1012f747da7477efdba0"><code>7c0244b</code></a> chore(deps): Update trivy to v0.65.0</li> <li>Additional commits viewable in <a href="https://github.com/aquasecurity/trivy-action/compare/0.27.0...0.33.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aquasecurity/trivy-action&package-manager=github_actions&previous-version=0.27.0&new-version=0.33.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

gitlab-35-mergerequest-42.md

2.3 KiB

gitlab-35-mergerequest-42.json

19 KiB

admin-backup commented

2025-11-17 18:48:18 +01:00

(Migrated from 172.24.0.1:8928)

Merged by: THoguet at 2025-11-17 17:48:18 UTC

*Merged by: THoguet at 2025-11-17 17:48:18 UTC*

admin-backup (Migrated from 172.24.0.1:8928) closed this pull request

2025-11-17 18:48:18 +01:00

admin-backup (Migrated from 172.24.0.1:8928) merged commit into main

2025-11-17 18:48:18 +01:00

gitea-emergency commented

2026-10-11 22:11:17 +02:00

Preserved GitLab !42 history: source attribution, exact timestamps, discussion grouping and review positions. Historical diff snapshots: 1; visible source notes: 1.

gitlab-35-mergerequest-42.md (SHA-256 f68500b1904b1e086d67bb3e61ea4070079c038b134f69e3bcf01a9c3fb2ed12)

gitlab-35-mergerequest-42.json (SHA-256 50c775d26de72b05f5645673a20f28ad25e1a1f03908f69f6d648e319ca5e820)

Old CI job execution and reports are omitted. Original source files and rollback backups remain protected.

Preserved GitLab !42 history: source attribution, exact timestamps, discussion grouping and review positions. Historical diff snapshots: 1; visible source notes: 1. [gitlab-35-mergerequest-42.md](https://gitea.nessar.fr/attachments/88196b21-bf87-42a3-923e-e185ebc296e8) (SHA-256 `f68500b1904b1e086d67bb3e61ea4070079c038b134f69e3bcf01a9c3fb2ed12`) [gitlab-35-mergerequest-42.json](https://gitea.nessar.fr/attachments/e23fe66d-5428-4736-bb73-6b74f93771d8) (SHA-256 `50c775d26de72b05f5645673a20f28ad25e1a1f03908f69f6d648e319ca5e820`) Old CI job execution and reports are omitted. Original source files and rollback backups remain protected.

gitea-emergency referenced this pull request

2026-10-11 22:11:39 +02:00

Bump tar from 7.5.9 to 7.5.10 #198

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: nessar/vac-optimizer#120