Merge pull request #21 from OpenVisualCloud/wangjingz-patch-4

Update trivy.yml
OpenVisualCloud · Dec 10, 2024 · a79fe28 · a79fe28
2 parents 8e69e99 + 97a6200
commit a79fe28
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -30,7 +30,8 @@ jobs:
     runs-on: "ubuntu-22.04"
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        # uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #V4.2.2
       - name: Check disk space
         run: df -h
       - name: Build an image from Dockerfile
@@ -64,8 +65,8 @@ jobs:
           vuln-type: 'os,library'
           severity: 'CRITICAL, HIGH'
           output: 'trivy-ivsr-results.sarif'
-
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+        # uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         with:
           sarif_file: 'trivy-ivsr-results.sarif'