Bump aquasecurity/trivy-action

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from d2a0b60797ff03db6132bd4e2b293f9b37081297 to c03d123cb480c08c69b054af418ea5e69fe6e57e.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/d2a0b60797ff03db6132bd4e2b293f9b37081297...c03d123cb480c08c69b054af418ea5e69fe6e57e)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: c03d123cb480c08c69b054af418ea5e69fe6e57e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
This commit is contained in:
dependabot[bot]
2026-10-07 20:53:43 +00:00
committed by GitHub
parent 4901fde4b1
commit a26994e3e4
+1 -1
View File
@@ -759,7 +759,7 @@ jobs:
cosign public-key --key env://COSIGN_PRIVATE_KEY >/dev/null
- name: Generate SBOM (SPDX JSON) from GHCR digest
uses: aquasecurity/trivy-action@d2a0b60797ff03db6132bd4e2b293f9b37081297 # v0.34.2
uses: aquasecurity/trivy-action@c03d123cb480c08c69b054af418ea5e69fe6e57e # v0.34.2
with:
image-ref: ${{ env.GHCR_REF }}
format: spdx-json