Skip to content

chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0#2691

Merged
eddycharly merged 1 commit into
mainfrom
dependabot/github_actions/aquasecurity/trivy-action-0.36.0
Apr 30, 2026
Merged

chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0#2691
eddycharly merged 1 commit into
mainfrom
dependabot/github_actions/aquasecurity/trivy-action-0.36.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps aquasecurity/trivy-action from 0.35.0 to 0.36.0.

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.36.0

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

Commits
  • ed142fd chore: update action version to v0.36.0 in examples (#563)
  • dea62cf chore(deps): Update trivy to v0.70.0 (#559)
  • 128d9a8 chore: use GitHub Actions as git commit author in bump-trivy workflow (#561)
  • 876cf04 Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #549 (#548)
  • dada784 Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name (#547)
  • 4a2deec fix: use portable shebang in entrypoint.sh (#545)
  • 1994662 chore(deps): bump the actions group with 5 updates (#558)
  • 6b36659 chore: add zizmor config (#557)
  • 316aa5a ci: add dependabot config (#556)
  • 264c9c5 test: use pinned digests for trivy-db, trivy-java-db and trivy-checks (#555)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 22, 2026 09:43
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/aquasecurity/trivy-action-0.36.0 branch 3 times, most recently from c86ed82 to ffffb52 Compare April 30, 2026 06:56
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@57a97c7...ed142fd)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/aquasecurity/trivy-action-0.36.0 branch from ffffb52 to 1899232 Compare April 30, 2026 08:47
@eddycharly
eddycharly enabled auto-merge (squash) April 30, 2026 08:48
@eddycharly eddycharly added this to the v0.2.15 milestone Apr 30, 2026
@eddycharly
eddycharly merged commit 9b3fc87 into main Apr 30, 2026
13 of 15 checks passed
@eddycharly
eddycharly deleted the dependabot/github_actions/aquasecurity/trivy-action-0.36.0 branch April 30, 2026 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ignore-semantic-pull-request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant