Merge pull request #871 from atlanhq/fix-versions

fix: update trivy-action to 0.35.0 to update versions

Author: Aryamanz29

.github/workflows/pyatlan-scheduled-scan.yml

@@ -41,7 +41,7 @@ jobs:
       # ── Image scan ──
 
       - name: Trivy image scan (JSON)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: 'pyatlan:trivy-scan'
           scanners: 'vuln'
@@ -56,7 +56,7 @@ jobs:
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
 
       - name: Trivy image scan (table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: 'pyatlan:trivy-scan'
           scanners: 'vuln'
@@ -73,7 +73,7 @@ jobs:
       # ── Dependency scan ──
 
       - name: Trivy dependency scan (JSON)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           input: 'uv.lock'
@@ -88,7 +88,7 @@ jobs:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
 
       - name: Trivy dependency scan (table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           input: 'uv.lock'

.github/workflows/scheduled-trivy-scan.yml

@@ -41,7 +41,7 @@ jobs:
       # ── Image scan ──
 
       - name: Trivy image scan (JSON)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: 'pyatlan:trivy-scan'
           scanners: 'vuln'
@@ -56,7 +56,7 @@ jobs:
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
 
       - name: Trivy image scan (table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: 'pyatlan:trivy-scan'
           scanners: 'vuln'
@@ -73,7 +73,7 @@ jobs:
       # ── Dependency scan ──
 
       - name: Trivy dependency scan (JSON)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           input: 'uv.lock'
@@ -88,7 +88,7 @@ jobs:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
 
       - name: Trivy dependency scan (table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           input: 'uv.lock'

.github/workflows/trivy.yml

@@ -41,7 +41,7 @@ jobs:
           tags: pyatlan-trivy:latest
 
       - name: Trivy image scan (table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: pyatlan-trivy:latest
           scanners: 'vuln'
@@ -67,7 +67,7 @@ jobs:
           fi
 
       - name: Trivy image scan (SARIF)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: pyatlan-trivy:latest
           scanners: 'vuln'
@@ -82,7 +82,7 @@ jobs:
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
 
       - name: Trivy dependency scan (uv.lock, table)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           scan-ref: uv.lock
@@ -108,7 +108,7 @@ jobs:
           fi
 
       - name: Trivy dependency scan (uv.lock, SARIF)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           scan-ref: uv.lock
@@ -163,7 +163,7 @@ jobs:
           } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Fail on High/Critical vulnerabilities (image)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           image-ref: pyatlan-trivy:latest
           scanners: 'vuln'
@@ -177,7 +177,7 @@ jobs:
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
 
       - name: Fail on High/Critical vulnerabilities (uv.lock)
-        uses: aquasecurity/trivy-action@0.34.2
+        uses: aquasecurity/trivy-action@0.35.0
         with:
           scan-type: fs
           scan-ref: uv.lock