ceos/unsloth
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CI(security): bump trivy + trufflehog to existing version tags

Browse source 
Job failed at "Set up job" because trivy-action@0.28.0 doesn't exist
on GitHub. Latest tag is v0.36.0; same fix for trufflehog (now v3.95.2).
This commit is contained in:
Daniel Han 2026-05-07 00:10:55 +00:00
commit 66103abc7f
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/security-audit.yml vendored
View file

@ -409,7 +409,7 @@ jobs:
# ─────────────────────────────────────────────────────────────
- name: Trivy (filesystem CVE + IaC misconfig)
continue-on-error: true
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@0.36.0
with:
scan-type: fs
scan-ref: .
@ -444,7 +444,7 @@ jobs:
# ─────────────────────────────────────────────────────────────
- name: TruffleHog (secrets in diff)
continue-on-error: true
uses: trufflesecurity/trufflehog@v3.83.5
uses: trufflesecurity/trufflehog@v3.95.2
with:
path: ./
base: ${{ github.event.pull_request.base.sha || '' }}