2026-05-18 19:42:28 +00:00
1 changed files with 7 additions and 6 deletions
@@ -47,12 +47,13 @@ jobs:
          /tmp/gitleaks detect --source . --no-banner --redact --verbose --exit-code 1
      - name: trivy fs scan
-        uses: aquasecurity/trivy-action@master
+        shell: bash
-        with:
+        run: |
-          scan-type: fs
+          set -euo pipefail
-          severity: HIGH,CRITICAL
+          TRIVY_VERSION=0.50.0
-          exit-code: 1
+          curl -fsSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
-          ignore-unfixed: true
+            | tar -xz -C /tmp trivy
          /tmp/trivy fs --severity HIGH,CRITICAL --exit-code 1 --no-progress --skip-dirs node_modules,target,dist .
  test:
    runs-on: docker