ci: bump trivy to 0.70.0 (M0.2)

v0.50.0 release tarball doesn't exist on GitHub releases (404). Pin to v0.70.0 which is the current latest. Refs: M0.2
2026-05-18 21:40:30 +02:00
parent 7da3f3208b
commit 7978105496
1 changed files with 1 additions and 1 deletions
@@ -50,7 +50,7 @@ jobs:
        shell: bash
        run: |
          set -euo pipefail
-          TRIVY_VERSION=0.50.0
+          TRIVY_VERSION=0.70.0
          curl -fsSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
            | tar -xz -C /tmp trivy
          /tmp/trivy fs --severity HIGH,CRITICAL --exit-code 1 --no-progress --skip-dirs node_modules,target,dist .