From 66103abc7f36a908dbfa03652134bb93e1f2687d Mon Sep 17 00:00:00 2001 From: Daniel Han Date: Thu, 7 May 2026 00:10:55 +0000 Subject: [PATCH] CI(security): bump trivy + trufflehog to existing version tags Job failed at "Set up job" because trivy-action@0.28.0 doesn't exist on GitHub. Latest tag is v0.36.0; same fix for trufflehog (now v3.95.2). --- .github/workflows/security-audit.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml index a9fbcbae49..124c2a86f9 100644 --- a/.github/workflows/security-audit.yml +++ b/.github/workflows/security-audit.yml @@ -409,7 +409,7 @@ jobs: # ───────────────────────────────────────────────────────────── - name: Trivy (filesystem CVE + IaC misconfig) continue-on-error: true - uses: aquasecurity/trivy-action@0.28.0 + uses: aquasecurity/trivy-action@0.36.0 with: scan-type: fs scan-ref: . @@ -444,7 +444,7 @@ jobs: # ───────────────────────────────────────────────────────────── - name: TruffleHog (secrets in diff) continue-on-error: true - uses: trufflesecurity/trufflehog@v3.83.5 + uses: trufflesecurity/trufflehog@v3.95.2 with: path: ./ base: ${{ github.event.pull_request.base.sha || '' }}