Bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 #180

Merged
admin-backup merged 1 commits from dependabot/github_actions/aquasecurity/trivy-action-0.34.1 into main 2026-03-01 21:12:43 +01:00
admin-backup commented 2026-02-23 21:06:22 +01:00 (Migrated from 172.24.0.1:8928)

Bumps aquasecurity/trivy-action from 0.34.0 to 0.34.1.

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.34.1

What's Changed

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.34.0...0.34.1

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.34.0 to 0.34.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's releases</a>.</em></p> <blockquote> <h2>v0.34.1</h2> <h2>What's Changed</h2> <ul> <li>ci(test): add zizmor security linter for GitHub Actions by <a href="https://github.com/DmitriyLewen"><code>@​DmitriyLewen</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/502">aquasecurity/trivy-action#502</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.34.0...0.34.1">https://github.com/aquasecurity/trivy-action/compare/0.34.0...0.34.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aquasecurity/trivy-action/commit/e368e328979b113139d6f9068e03accaed98a518"><code>e368e32</code></a> ci(test): add zizmor security linter for GitHub Actions (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/502">#502</a>)</li> <li>See full diff in <a href="https://github.com/aquasecurity/trivy-action/compare/0.34.0...0.34.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aquasecurity/trivy-action&package-manager=github_actions&previous-version=0.34.0&new-version=0.34.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
admin-backup commented 2026-03-01 21:12:07 +01:00 (Migrated from 172.24.0.1:8928)

@dependabot recreate

`@dependabot` recreate
admin-backup commented 2026-03-01 21:12:43 +01:00 (Migrated from 172.24.0.1:8928)

Merged by: github-actions[bot] at 2026-03-01 20:12:43 UTC

*Merged by: github-actions[bot] at 2026-03-01 20:12:43 UTC*
admin-backup (Migrated from 172.24.0.1:8928) closed this pull request 2026-03-01 21:12:43 +01:00
admin-backup (Migrated from 172.24.0.1:8928) merged commit into main 2026-03-01 21:12:43 +01:00

Preserved GitLab !102 history: source attribution, exact timestamps, discussion grouping and review positions. Historical diff snapshots: 1; visible source notes: 2.

gitlab-35-mergerequest-102.md (SHA-256 20f080a10b4110722c9634bffc4a02497df68eba48c9bc5aad440c8f7408d9a1)

gitlab-35-mergerequest-102.json (SHA-256 8d617e6c74f90edb092a5a271a8d36ed2d320a63c61279ac446b9a230b08e655)

Old CI job execution and reports are omitted. Original source files and rollback backups remain protected.

<!-- gitlab-to-gitea-history:35:MergeRequest:102 --> Preserved GitLab !102 history: source attribution, exact timestamps, discussion grouping and review positions. Historical diff snapshots: 1; visible source notes: 2. [gitlab-35-mergerequest-102.md](https://gitea.nessar.fr/attachments/15ab47d8-09ac-41e0-9f22-643ef1e3338a) (SHA-256 `20f080a10b4110722c9634bffc4a02497df68eba48c9bc5aad440c8f7408d9a1`) [gitlab-35-mergerequest-102.json](https://gitea.nessar.fr/attachments/1874b2bf-e44f-4a87-bd13-28c38a94b390) (SHA-256 `8d617e6c74f90edb092a5a271a8d36ed2d320a63c61279ac446b9a230b08e655`) Old CI job execution and reports are omitted. Original source files and rollback backups remain protected.
Sign in to join this conversation.