Merge pull request #21 from AnchorFree/workflows-1208968

Workflows updated from AnchorFree/workflows:1208968
AnchorFree · May 4, 2023 · bf2470b · bf2470b
2 parents 459b902 + 6c42fdb
commit bf2470b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml
@@ -11,7 +11,7 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v3
       - name: Scanning the dockerfile
-        uses: reviewdog/[email protected].0
+        uses: reviewdog/[email protected].1
         with:
           reporter: github-pr-review
           filter_mode: file

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -4,7 +4,10 @@ on:
   push:
     branches: [ "master" ]
   pull_request:
-    types: [opened, reopened]
+    types: [opened, reopened, synchronize]
+  schedule:
+    # 00:00 every 14 days 
+    - cron: 0 0 */14 * *
 
 permissions:
   contents: read
@@ -28,14 +31,14 @@ jobs:
         run: git lfs checkout
 
       - name: Run Trivy vulnerability scanner in repo mode (table)
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.10.0
         with:
           scan-type: 'fs'
           ignore-unfixed: true
           format: 'table'
 
       - name: Run Trivy vulnerability scanner in repo mode (sarif)
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.10.0
         with:
           scan-type: 'fs'
           ignore-unfixed: true
@@ -68,14 +71,14 @@ jobs:
         run: |
           docker build -t ${{ github.sha }} .
       - name: Run Trivy vulnerability scanner in image mode (table output)
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.10.0
         with:
           image-ref: '${{ github.sha }}'
           ignore-unfixed: true
           format: 'table'
 
       - name: Run Trivy vulnerability scanner in image mode (sarif output)
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.10.0
         with:
           image-ref: '${{ github.sha }}'
           ignore-unfixed: true