mirrors/docker-netbootxyz
1
0
Fork 0
mirror of https://github.com/netbootxyz/docker-netbootxyz.git synced 2026-04-11 08:21:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

Pin Trivy CLI to v0.69.3 to work around deleted release assets

Browse Source 
Trivy releases v0.27.0-v0.69.1 were deleted as part of a supply chain
attack on 2026-03-01 (aquasecurity/trivy#10265). Pin the CLI version
explicitly so the action does not try to download missing assets.
This commit is contained in:
Antony Messerli 2026-03-15 14:27:30 -05:00
parent dab4b8137b
commit ecd624b2bb
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.github/workflows/build.yml vendored
View File

@ -96,6 +96,7 @@ jobs:
uses: aquasecurity/trivy-action@0.33.1
with:
image-ref: 'ghcr.io/netbootxyz/netbootxyz:${{ env.TAG_SUFFIX }}'
version: 'v0.69.3'
format: 'table'
exit-code: ${{ env.IS_PR == 'true' && '1' || '0' }}
ignore-unfixed: true