Skip to content

Commit 7894740

Browse files
authored
Bump Trivy from v0.67.2 to v0.69.2 (#39)
Trivy suffered a security incident on March 1 where an attacker deleted all GitHub Releases from v0.27.0 through v0.69.1. The install script finds the git tag but the binary assets are gone, causing the Docker build to fail with exit code 1. v0.69.2 is the only version with restored release assets. Ref: https://github.com/aquasecurity/trivy/discussions/10265
1 parent dfd0f7f commit 7894740

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
1919
RUN npm install -g socket
2020

2121
# Install Trivy
22-
ARG TRIVY_VERSION=v0.67.2
22+
ARG TRIVY_VERSION=v0.69.2
2323
RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin "${TRIVY_VERSION}"
2424

2525
# Install Trufflehog

0 commit comments

Comments
 (0)