ehlxr/docker_practice
1
0
Fork 0
mirror of https://github.com/yeasy/docker_practice.git synced 2026-08-10 16:37:34 +00:00
Code Issues Projects Releases Wiki Activity

Update software versions and fix security refs

Browse Source
This commit is contained in:
yeasy
2026-04-18 19:04:14 -07:00
parent 1bed644e5e
commit 077e55f494
4 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
18_security/18.6_image_security.md
+3 -1
View File
@@ -411,7 +411,9 @@ jobs:
tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
- name: Run Trivy vulnerability scan
uses: aquasecurity/trivy-action@master
# 安全提醒：2026 年 3 月 Trivy GitHub Actions 遭受供应链攻击，
# 76 个版本标签被劫持。务必使用不可变的 commit SHA 引用，而非可变标签。
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
with:
image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
format: 'sarif'