ehlxr/docker_practice
1
0
Fork 0
mirror of https://github.com/yeasy/docker_practice.git synced 2026-08-10 08:27:25 +00:00
Code Issues Projects Releases Wiki Activity

Add runC CVEs and AuthZ plugin guidance

Browse Source
This commit is contained in:
yeasy
2026-04-22 12:24:31 -07:00
parent 771d75ac03
commit 2d7740ffb5
3 changed files with 31 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
18_security/18.6_image_security.md
+1 -1
View File
@@ -412,7 +412,7 @@ jobs:
- name: Run Trivy vulnerability scan
# 安全提醒：2026 年 3 月 Trivy GitHub Actions 遭受供应链攻击，
# 76 个版本标签被劫持。务必使用不可变的 commit SHA 引用，而非可变标签。
# 75 个版本标签被劫持。务必使用不可变的 commit SHA 引用，而非可变标签。
# 使用前请到 https://github.com/aquasecurity/trivy-action/releases 核实 SHA 对应正确版本。
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
with: