Update security-scan.yml

Endava · Nov 4, 2024 · a6a38cd · a6a38cd
1 parent 39f5ec1
commit a6a38cd
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
@@ -57,7 +57,7 @@ jobs:
       -   run: wget "https://img.shields.io/static/v1.png?label=${{ env.PHP_VERSION }}&message=${{ env.IMAGE_SIZE }}&color=blue" -O size-status.png
 
       -   name: Run Alpine Trivy vulnerability scanner
-          uses: aquasecurity/trivy-action@master
+          uses: aquasecurity/trivy-action@0.28.0
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'table'
@@ -67,15 +67,15 @@ jobs:
             severity: 'CRITICAL,HIGH'
 
       -   name: Run Alpine Trivy vulnerability scanner and create html file
-          uses: aquasecurity/trivy-action@master
+          uses: aquasecurity/trivy-action@0.28.0
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'template'
             template: '@/contrib/html.tpl'
             output: 'vulnerability-report.html'
 
       -   name: Run Alpine Trivy vulnerability scanner and create html file
-          uses: aquasecurity/trivy-action@master
+          uses: aquasecurity/trivy-action@0.28.0
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'json'
@@ -92,7 +92,7 @@ jobs:
           run: wget "https://img.shields.io/static/v1.png?label=vulnerabilites&message=${{ env.FIXED_VULNERABILITIES }}&color=red" -O vulnerability-status.png
 
       -   name: Run Alpine Trivy vulnerability scanner and upload to github security tab
-          uses: aquasecurity/trivy-action@master
+          uses: aquasecurity/trivy-action@0.28.0
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'sarif'