From 9b9fb443b2f9b80bed61919c5c6ff89a024613b5 Mon Sep 17 00:00:00 2001 From: Benjamin Pickard Date: Tue, 10 Mar 2026 17:07:51 -0400 Subject: [PATCH] ci: update trivy-action to v0.35.0 to fix image scanning failure The trivy-action@0.29.0 was trying to install Trivy v0.57.1 which no longer exists in the GitHub releases. This was causing all PR builds to fail on the "Image thick plugin" job. Update to v0.35.0 which properly installs the latest Trivy version. Assisted by Claude Sonnet 4.5 Signed-off-by: Benjamin Pickard --- .github/workflows/image-build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/image-build.yml b/.github/workflows/image-build.yml index d0fe98450..e19ebfb0b 100644 --- a/.github/workflows/image-build.yml +++ b/.github/workflows/image-build.yml @@ -57,7 +57,7 @@ jobs: provenance: false - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.29.0 + uses: aquasecurity/trivy-action@0.35.0 with: image-ref: ghcr.io/${{ github.repository }}:latest-thick ignore-unfixed: true