Commit Graph

2 Commits

Author SHA1 Message Date
dependabot[bot]
8743aa11bf
chore(deps): bump aquasecurity/trivy-action in /.github/workflows (#405)
Some checks failed
testing main branch / default-user-name-password (push) Has been cancelled
testing main branch / check-ssh-key (push) Has been cancelled
testing main branch / support-key-passphrase (push) Has been cancelled
testing main branch / multiple-server (push) Has been cancelled
testing main branch / support-ed25519-key (push) Has been cancelled
testing main branch / testing-with-env (push) Has been cancelled
testing main branch / testing ipv6 (push) Has been cancelled
testing main branch / some special character (push) Has been cancelled
testing main branch / testing-capturing-output (push) Has been cancelled
testing main branch / testing-script-stop (push) Has been cancelled
testing main branch / testing-script-error (push) Has been cancelled
testing stable version / default-user-name-password (push) Has been cancelled
testing stable version / check-ssh-key (push) Has been cancelled
testing stable version / support-key-passphrase (push) Has been cancelled
testing stable version / multiple-server (push) Has been cancelled
testing stable version / support-ed25519-key (push) Has been cancelled
testing stable version / testing-with-env (push) Has been cancelled
Trivy Security Scan / Trivy Security Scan (push) Has been cancelled
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.34.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-21 22:52:02 +08:00
appleboy
53f5c5cedf
ci: add automated Trivy security scanning via GitHub Actions
- Add a GitHub Action workflow to perform Trivy security scans on the repository
- Configure scheduled, push, and pull request triggers for the scan
- Upload vulnerability scan results to the GitHub Security tab in SARIF format
- Include additional scan step with table output and failure on detected vulnerabilities

Signed-off-by: appleboy <appleboy.tw@gmail.com>
2025-11-08 10:25:32 +08:00