Bump aquasecurity/trivy-action from 0.10.0 to 0.14.0

[dependabot[bot]]

Bumps aquasecurity/trivy-action from 0.10.0 to 0.14.0.

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.14.0

What's Changed

• fix: set return code after each Trivy call by @​LiamMacP in aquasecurity/trivy-action#247
• Update to trivy version 0.47.0 in Dockerfile by @​MPV in aquasecurity/trivy-action#280
• feature: add filesystem alias by @​kderck in aquasecurity/trivy-action#269

New Contributors

• @​LiamMacP made their first contribution in aquasecurity/trivy-action#247
• @​MPV made their first contribution in aquasecurity/trivy-action#280
• @​kderck made their first contribution in aquasecurity/trivy-action#269

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.13.1...0.14.0

v0.13.1

What's Changed

• Update Dockerfile to 0.46.1 by @​witoldsleczkowski in aquasecurity/trivy-action#277

New Contributors

• @​witoldsleczkowski made their first contribution in aquasecurity/trivy-action#277

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.13.0...0.13.1

v0.13.0

What's Changed

• fix: mark image-ref attribute optional by @​arxeiss in aquasecurity/trivy-action#261
• Update Dockerfile to 0.46.0 by @​Cr0n1c in aquasecurity/trivy-action#274

New Contributors

• @​arxeiss made their first contribution in aquasecurity/trivy-action#261
• @​Cr0n1c made their first contribution in aquasecurity/trivy-action#274

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.12.0...0.13.0

v0.12.0

What's Changed

• chore(deps): Update trivy to v0.43.1 by @​simar7 in aquasecurity/trivy-action#243
• ci: add workflow to bump trivy by @​nikpivkin in aquasecurity/trivy-action#245
• Update README.md to change the example to the new default brach name … by @​jdsmithit in aquasecurity/trivy-action#234
• feat(trivy): Bump to v0.45.0 by @​simar7 in aquasecurity/trivy-action#256

New Contributors

• @​nikpivkin made their first contribution in aquasecurity/trivy-action#245
• @​jdsmithit made their first contribution in aquasecurity/trivy-action#234

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.11.2...0.12.0

v0.11.2

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.11.1...0.11.2

v0.11.1

... (truncated)

Commits

• 2b6a709 Add filesystem alias (#269)
• 47e481a Update to trivy version 0.47.0 in Dockerfile (#280)
• 7b07fa7 fix: set return code after each Trivy call (#247)
• f78e9ec Update Dockerfile to 0.46.1 (#277)
• b77b85c Update Dockerfile to 0.46.0 (#274)
• 69cbbc0 fix: mark image-ref attribute optional (#261)
• fbd1636 feat(trivy): Bump to v0.45.0 (#256)
• 559eb12 Merge pull request #234 from jdsmithit/patch-1
• e602665 ci: add workflow to bump trivy (#245)
• 3dd517d chore(deps): Update trivy to v0.43.1 (#243)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #12979.